Aller au contenu
en Se connecter
6.4 Moyenne

CVE-2024-20475 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage,…

Description

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious data into a specific data field in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Catalyst SD-WAN Manager 20.14.1 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.13.1 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.12 20.12.1 → 20.12.4 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.11 20.11.1 → 20.11.1.2 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.10 20.10.1 → 20.10.1.2 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.9 20.9.2.2 → 20.9.5.1 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.8.1 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.7 20.7.1EFT2 → 20.7.2 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.6 20.6.0.18.3 → 20.6.7 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Catalyst SD-WAN Manager

Les 46 CVE de Cisco Catalyst SD-WAN Manager →
CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability 9.8 Critique CVE-2026-20313 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 7.7 Élevée CVE-2026-20312 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 8.8 Élevée CVE-2026-20310 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 9.1 Critique
Suivre cette CVE