CVE-2020-3536: Cisco SD-WAN vManage Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious data into a specific data field in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3536?
CVE-2020-3536 is a vulnerability in the web-based management interface of Cisco SD-WAN vManage Software that allows for cross-site scripting (XSS) attacks.
How does CVE-2020-3536 impact Cisco SD-WAN vManage Software?
CVE-2020-3536 allows an authenticated, remote attacker to conduct XSS attacks against users of the web-based management interface.
What versions of Cisco SD-WAN vManage Software are affected by CVE-2020-3536?
Versions 20.1.2 and 20.3.1 of Cisco SD-WAN vManage Software are affected by CVE-2020-3536.
What is the severity of CVE-2020-3536?
CVE-2020-3536 has a severity of medium.
How do I fix CVE-2020-3536?
To fix CVE-2020-3536, it is recommended to upgrade to a version of Cisco SD-WAN vManage Software that is not affected by the vulnerability.