Aller au contenu
en Se connecter
5.4 Moyenne

CVE-2026-20108 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated,…

Description

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of the web-based management interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Catalyst SD-WAN Manager 20.18.1 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.16.1 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.15 20.15.1 → 20.15.4.2 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.14.1 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.13.1 Pas de correctif indiqué
Cisco Catalyst SD-WAN Manager 20.12 20.12.1 → 20.12.6.1 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Catalyst SD-WAN Manager

Les 46 CVE de Cisco Catalyst SD-WAN Manager →
CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability 9.8 Critique CVE-2026-20313 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 7.7 Élevée CVE-2026-20312 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 8.8 Élevée CVE-2026-20310 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 9.1 Critique
Suivre cette CVE