Aller au contenu
en Se connecter
6.1 Moyenne

CVE-2026-20041 A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote…

Description

A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by persuading an authenticated user of the device management interface to click a crafted link. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device to an attacker-controlled server. The attacker could then execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Nexus Dashboard Versions non publiées
Cisco Nexus Dashboard Insights 6.4.1 Pas de correctif indiqué
Cisco Nexus Dashboard Insights 6.3.1 Pas de correctif indiqué
Cisco Nexus Dashboard Insights 6.2 6.2.1 → 6.2.2 Pas de correctif indiqué
Cisco Nexus Dashboard Insights 6.1 6.1.1 → 6.1.3 Pas de correctif indiqué
Cisco Nexus Dashboard Insights 6.0 6.0.1 → 6.0.2 Pas de correctif indiqué
Cisco Nexus Dashboard Insights 5.1 5.1.0.131 → 5.1.0.135 Pas de correctif indiqué
Cisco Nexus Dashboard Insights 5.0 5.0.1.150 → 5.0.1.154 Pas de correctif indiqué
Cisco Nexus Dashboard Insights 2.2 2.2.2.125 → 2.2.2.126 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Nexus Dashboard

Les 28 CVE de Cisco Nexus Dashboard →
CVE-2026-20360 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering… 8.8 Élevée CVE-2026-76409 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering… 8.8 Élevée CVE-2026-20361 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering… 8.8 Élevée CVE-2026-20325 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus… 9.9 Critique
Suivre cette CVE