CVE-2019-1733: Cisco NX-OS Software NX-API Sandbox Cross-Site Scripting Vulnerability
A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the NX-API Sandbox interface. An attacker could exploit this vulnerability by persuading a user of the NX-API Sandbox interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected NX-API Sandbox interface.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-1733?
CVE-2019-1733 is a vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software that could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface.
What is the severity of CVE-2019-1733?
The severity of CVE-2019-1733 is medium with a CVSS score of 5.4.
How does CVE-2019-1733 impact Cisco NX-OS Software?
CVE-2019-1733 allows an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface of an affected device running Cisco NX-OS Software.
Is Cisco Nexus 3000 affected by CVE-2019-1733?
No, Cisco Nexus 3000 is not affected by CVE-2019-1733.
How can I fix CVE-2019-1733?
To fix CVE-2019-1733, Cisco recommends upgrading to a fixed software release.