CVE-2022-20969: XSS
A vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the Cisco Umbrella dashboard. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom JavaScript to the web application and persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-20969?
The severity of CVE-2022-20969 is classified as medium due to its potential for cross-site scripting attacks.
How do I fix CVE-2022-20969?
To fix CVE-2022-20969, ensure that you update to the latest version of Cisco Umbrella where the vulnerability has been patched.
Who is affected by CVE-2022-20969?
CVE-2022-20969 affects users of Cisco Umbrella version 003.003(000) and possibly other versions if unpatched.
What kind of attack can be performed using CVE-2022-20969?
CVE-2022-20969 allows authenticated remote attackers to perform cross-site scripting (XSS) attacks against Cisco Umbrella dashboard users.
What causes the vulnerability in CVE-2022-20969?
The vulnerability in CVE-2022-20969 is caused by unsanitized user input within multiple management dashboard pages of Cisco Umbrella.