4.8
Moyenne
CVE-2026-20090 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with…
Description
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Enterprise NFV Infrastructure Software 4.18 | 4.18.1 → 4.18.2 | Pas de correctif indiqué |
| Cisco Enterprise NFV Infrastructure Software | 4.16.1 | Pas de correctif indiqué |
| Cisco Enterprise NFV Infrastructure Software 4.15 | 4.15.1 → 4.15.4 | Pas de correctif indiqué |
| Cisco Enterprise NFV Infrastructure Software | 4.14.1 | Pas de correctif indiqué |
| Cisco Enterprise NFV Infrastructure Software | 4.13.1 | Pas de correctif indiqué |
| Cisco Enterprise NFV Infrastructure Software 4.12 | 4.12.1 → 4.12.6 | Pas de correctif indiqué |
| Cisco Enterprise NFV Infrastructure Software | 4.11.1 | Pas de correctif indiqué |
| Cisco Enterprise NFV Infrastructure Software | 4.10.1 | Pas de correctif indiqué |
| Cisco Enterprise NFV Infrastructure Software 4.9 | 4.9.1 → 4.9.6 | Pas de correctif indiqué |
Afficher les 31 autres branches Masquer les 31 autres branches
Références
- cisco-sa-cimc-xss-A2tkgVAB sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Enterprise NFV Infrastructure Software
Les 41 CVE de Cisco Enterprise NFV Infrastructure Software →
CVE-2026-20293
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and…
7.1
Élevée
CVE-2026-20288
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker…
6.5
Moyenne
CVE-2026-20198
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an…
4.8
Moyenne
CVE-2026-20089
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with…
4.8
Moyenne