CVE-2026-20089: Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

Published Apr 1, 2026

Updated

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

Affected Software

262 affected components

Cisco Integrated Management Controller (IMC)

Cisco Enterprise NFV Infrastructure Software=3.3.1

Cisco Enterprise NFV Infrastructure Software=3.4.1

Cisco Enterprise NFV Infrastructure Software=3.5.1

Cisco Enterprise NFV Infrastructure Software=3.5.2

Cisco Enterprise NFV Infrastructure Software=3.6.1

Cisco Enterprise NFV Infrastructure Software=3.6.2

Cisco Enterprise NFV Infrastructure Software=3.6.3

Cisco Enterprise NFV Infrastructure Software=3.7.1

Cisco Enterprise NFV Infrastructure Software=3.8.1

Cisco Enterprise NFV Infrastructure Software=3.9.1

Cisco Enterprise NFV Infrastructure Software=3.9.2

Cisco Enterprise NFV Infrastructure Software=3.10.1

Cisco Enterprise NFV Infrastructure Software=3.10.2

Cisco Enterprise NFV Infrastructure Software=3.10.3

Cisco Enterprise NFV Infrastructure Software=3.11.1

Cisco Enterprise NFV Infrastructure Software=3.11.2

Cisco Enterprise NFV Infrastructure Software=3.11.3

Cisco Enterprise NFV Infrastructure Software=3.12.1

Cisco Enterprise NFV Infrastructure Software=3.12.1a

Cisco Enterprise NFV Infrastructure Software=3.12.1b

Cisco Enterprise NFV Infrastructure Software=3.12.2

Cisco Enterprise NFV Infrastructure Software=3.12.3

Cisco Enterprise NFV Infrastructure Software=4.1.1

Cisco Enterprise NFV Infrastructure Software=4.1.2

Cisco Enterprise NFV Infrastructure Software=4.2.1

Cisco Enterprise NFV Infrastructure Software=4.2.2

Cisco Enterprise NFV Infrastructure Software=4.4.1

Cisco Enterprise NFV Infrastructure Software=4.4.2

Cisco Enterprise NFV Infrastructure Software=4.4.3

Cisco Enterprise NFV Infrastructure Software=4.5.1

Cisco Enterprise NFV Infrastructure Software=4.6.1

Cisco Enterprise NFV Infrastructure Software=4.6.2

Cisco Enterprise NFV Infrastructure Software=4.6.2-fc2

Cisco Enterprise NFV Infrastructure Software=4.6.2-fc3

Cisco Enterprise NFV Infrastructure Software=4.6.3

Cisco Enterprise NFV Infrastructure Software=4.6.3-fc4

Cisco Enterprise NFV Infrastructure Software=4.6.4

Cisco Enterprise NFV Infrastructure Software=4.6.5-es1

Cisco Enterprise NFV Infrastructure Software=4.7.1

Cisco Enterprise NFV Infrastructure Software=4.8.1

Cisco Enterprise NFV Infrastructure Software=4.8.2

Cisco Enterprise NFV Infrastructure Software=4.9.1

Cisco Enterprise NFV Infrastructure Software=4.9.2

Cisco Enterprise NFV Infrastructure Software=4.9.2-fc5

Cisco Enterprise NFV Infrastructure Software=4.9.3

Cisco Enterprise NFV Infrastructure Software=4.9.4

Cisco Enterprise NFV Infrastructure Software=4.9.4-es8

Cisco Enterprise NFV Infrastructure Software=4.9.4-es9

Cisco Enterprise NFV Infrastructure Software=4.9.4-fc3

Cisco Enterprise NFV Infrastructure Software=4.9.5

Cisco Enterprise NFV Infrastructure Software=4.9.6

Cisco Enterprise NFV Infrastructure Software=4.10.1

Cisco Enterprise NFV Infrastructure Software=4.11.1

Cisco Enterprise NFV Infrastructure Software=4.12.1

Cisco Enterprise NFV Infrastructure Software=4.12.2

Cisco Enterprise NFV Infrastructure Software=4.12.3

Cisco Enterprise NFV Infrastructure Software=4.12.4

Cisco Enterprise NFV Infrastructure Software=4.12.5

Cisco Enterprise NFV Infrastructure Software=4.12.6

Cisco Enterprise NFV Infrastructure Software=4.13.1

Cisco Enterprise NFV Infrastructure Software=4.14.1

Cisco Enterprise NFV Infrastructure Software=4.15.1

Cisco Enterprise NFV Infrastructure Software=4.15.2

Cisco Enterprise NFV Infrastructure Software=4.15.3

Cisco Enterprise NFV Infrastructure Software=4.15.4

Cisco Enterprise NFV Infrastructure Software=4.16.1

Cisco Enterprise NFV Infrastructure Software=4.18.1

Cisco Enterprise NFV Infrastructure Software=4.18.2

Cisco Enterprise NFV Infrastructure Software=4.18.2a

Cisco Unified Computing System=3.1\(1d\)

Cisco Unified Computing System=3.1\(2b\)

Cisco Unified Computing System=3.1\(2c\)

Cisco Unified Computing System=3.1\(2d\)

Cisco Unified Computing System=3.1\(2e\)

Cisco Unified Computing System=3.1\(2g\)

Cisco Unified Computing System=3.1\(2i\)

Cisco Unified Computing System=3.1\(3a\)

Cisco Unified Computing System=3.1\(3b\)

Cisco Unified Computing System=3.1\(3c\)

Cisco Unified Computing System=3.1\(3d\)

Cisco Unified Computing System=3.1\(3g\)

Cisco Unified Computing System=3.1\(3h\)

Cisco Unified Computing System=3.1\(3i\)

Cisco Unified Computing System=3.1\(3j\)

Cisco Unified Computing System=3.1\(3k\)

Cisco Unified Computing System=4.0\(1.240\)

Cisco Unified Computing System=4.0\(1a\)

Cisco Unified Computing System=4.0\(1b\)

Cisco Unified Computing System=4.0\(1c\)

Cisco Unified Computing System=4.0\(1d\)

Cisco Unified Computing System=4.0\(1e\)

Cisco Unified Computing System=4.0\(1g\)

Cisco Unified Computing System=4.0\(1h\)

Cisco Unified Computing System=4.0\(2c\)

Cisco Unified Computing System=4.0\(2d\)

Cisco Unified Computing System=4.0\(2f\)

Cisco Unified Computing System=4.0\(2g\)

Cisco Unified Computing System=4.0\(2h\)

Cisco Unified Computing System=4.0\(2i\)

Cisco Unified Computing System=4.0\(2k\)

Cisco Unified Computing System=4.0\(2l\)

Cisco Unified Computing System=4.0\(2m\)

Cisco Unified Computing System=4.0\(2n\)

Cisco Unified Computing System=4.0\(2o\)

Cisco Unified Computing System=4.0\(2p\)

Cisco Unified Computing System=4.0\(2q\)

Cisco Unified Computing System=4.0\(2r\)

Cisco Unified Computing System=4.0\(4b\)

Cisco Unified Computing System=4.0\(4c\)

Cisco Unified Computing System=4.0\(4d\)

Cisco Unified Computing System=4.0\(4e\)

Cisco Unified Computing System=4.0\(4f\)

Cisco Unified Computing System=4.0\(4h\)

Cisco Unified Computing System=4.0\(4i\)

Cisco Unified Computing System=4.0\(4j\)

Cisco Unified Computing System=4.0\(4k\)

Cisco Unified Computing System=4.0\(4l\)

Cisco Unified Computing System=4.0\(4m\)

Cisco Unified Computing System=4.0\(4n\)

Cisco Unified Computing System=4.1\(1c\)

Cisco Unified Computing System=4.1\(1d\)

Cisco Unified Computing System=4.1\(1f\)

Cisco Unified Computing System=4.1\(1g\)

Cisco Unified Computing System=4.1\(1h\)

Cisco Unified Computing System=4.1\(2a\)

Cisco Unified Computing System=4.1\(2b\)

Cisco Unified Computing System=4.1\(2d\)

Cisco Unified Computing System=4.1\(2e\)

Cisco Unified Computing System=4.1\(2f\)

Cisco Unified Computing System=4.1\(2g\)

Cisco Unified Computing System=4.1\(2h\)

Cisco Unified Computing System=4.1\(2j\)

Cisco Unified Computing System=4.1\(2k\)

Cisco Unified Computing System=4.1\(2l\)

Cisco Unified Computing System=4.1\(2m\)

Cisco Unified Computing System=4.1\(3b\)

Cisco Unified Computing System=4.1\(3c\)

Cisco Unified Computing System=4.1\(3d\)

Cisco Unified Computing System=4.1\(3f\)

Cisco Unified Computing System=4.1\(3g\)

Cisco Unified Computing System=4.1\(3h\)

Cisco Unified Computing System=4.1\(3i\)

Cisco Unified Computing System=4.1\(3l\)

Cisco Unified Computing System=4.1\(3m\)

Cisco Unified Computing System=4.1\(3n\)

Cisco Unified Computing System=4.2\(1a\)

Cisco Unified Computing System=4.2\(1b\)

Cisco Unified Computing System=4.2\(1c\)

Cisco Unified Computing System=4.2\(1e\)

Cisco Unified Computing System=4.2\(1f\)

Cisco Unified Computing System=4.2\(1g\)

Cisco Unified Computing System=4.2\(1i\)

Cisco Unified Computing System=4.2\(1j\)

Cisco Unified Computing System=4.2\(2a\)

Cisco Unified Computing System=4.2\(2f\)

Cisco Unified Computing System=4.2\(2g\)

Cisco Unified Computing System=4.2\(3b\)

Cisco Unified Computing System=4.2\(3d\)

Cisco Unified Computing System=4.2\(3e\)

Cisco Unified Computing System=4.2\(3g\)

Cisco Unified Computing System=4.2\(3h\)

Cisco Unified Computing System=4.2\(3i\)

Cisco Unified Computing System=4.2\(3j\)

Cisco Unified Computing System=4.2\(3k\)

Cisco Unified Computing System=4.2\(3l\)

Cisco Unified Computing System=4.2\(3m\)

Cisco Unified Computing System=4.2\(3n\)

Cisco Unified Computing System=4.2\(3o\)

Cisco Unified Computing System=4.2\(3p\)

Cisco Unified Computing System=4.3\(1.230097\)

Cisco Unified Computing System=4.3\(1.230124\)

Cisco Unified Computing System=4.3\(1.230138\)

Cisco Unified Computing System=4.3\(2.230207\)

Cisco Unified Computing System=4.3\(2.230270\)

Cisco Unified Computing System=4.3\(2.240002\)

Cisco Unified Computing System=4.3\(2.240009\)

Cisco Unified Computing System=4.3\(2.240037\)

Cisco Unified Computing System=4.3\(2.240053\)

Cisco Unified Computing System=4.3\(2.240077\)

Cisco Unified Computing System=4.3\(2.240090\)

Cisco Unified Computing System=4.3\(2.240107\)

Cisco Unified Computing System=4.3\(2.250016\)

Cisco Unified Computing System=4.3\(2.250021\)

Cisco Unified Computing System=4.3\(2.250022\)

Cisco Unified Computing System=4.3\(2.250037\)

Cisco Unified Computing System=4.3\(2.250045\)

Cisco Unified Computing System=4.3\(2.250063\)

Cisco Unified Computing System=4.3\(3.240022\)

Cisco Unified Computing System=4.3\(3.240041\)

Cisco Unified Computing System=4.3\(3.240043\)

Cisco Unified Computing System=4.3\(4.240142\)

Cisco Unified Computing System=4.3\(4.240152\)

Cisco Unified Computing System=4.3\(4.241014\)

Cisco Unified Computing System=4.3\(4.241063\)

Cisco Unified Computing System=4.3\(4.242028\)

Cisco Unified Computing System=4.3\(4.242038\)

Cisco Unified Computing System=4.3\(4.242066\)

Cisco Unified Computing System=4.3\(4.252001\)

Cisco Unified Computing System=4.3\(4.252002\)

Cisco Unified Computing System=4.3\(5.240021\)

Cisco Unified Computing System=4.3\(5.250001\)

Cisco Unified Computing System=4.3\(5.250030\)

Cisco Unified Computing System=4.3\(5.250033\)

Cisco Unified Computing System=4.3\(5.250043\)

Cisco Unified Computing System=4.3\(5.250045\)

Cisco Unified Computing System=4.3\(6.250039\)

Cisco Unified Computing System=4.3\(6.250040\)

Cisco Unified Computing System=4.3\(6.250044\)

Cisco Unified Computing System=4.3\(6.250053\)

Cisco Unified Computing System=4.3\(6.250060\)

Cisco Unified Computing System=4.3\(6.250101\)

Cisco Unified Computing System=4.3\(6.250117\)

Cisco Unified Computing System=4.3\(6.260003\)

Cisco Unified Computing System=6.0\(1.250127\)

Cisco Unified Computing System=6.0\(1.250130\)

Cisco Unified Computing System=6.0\(1.250131\)

Cisco Unified Computing System=6.0\(1.250174\)

Cisco Unified Computing System=6.0\(1.250192\)

Cisco Unified Computing System=6.0\(1.250194\)

Cisco Unified Computing System E-series Software=2.0.0

Cisco Unified Computing System E-series Software=2.1.0

Cisco Unified Computing System E-series Software=2.2.1

Cisco Unified Computing System E-series Software=2.2.2

Cisco Unified Computing System E-series Software=2.3.1

Cisco Unified Computing System E-series Software=2.3.2

Cisco Unified Computing System E-series Software=2.3.3

Cisco Unified Computing System E-series Software=2.3.5

Cisco Unified Computing System E-series Software=2.4.0

Cisco Unified Computing System E-series Software=2.4.1

Cisco Unified Computing System E-series Software=2.4.2

Cisco Unified Computing System E-series Software=3.0.1

Cisco Unified Computing System E-series Software=3.0.2

Cisco Unified Computing System E-series Software=3.1.0

Cisco Unified Computing System E-series Software=3.1.1

Cisco Unified Computing System E-series Software=3.1.2

Cisco Unified Computing System E-series Software=3.1.3

Cisco Unified Computing System E-series Software=3.1.4

Cisco Unified Computing System E-series Software=3.1.5

Cisco Unified Computing System E-series Software=3.2.1

Cisco Unified Computing System E-series Software=3.2.2

Cisco Unified Computing System E-series Software=3.2.3

Cisco Unified Computing System E-series Software=3.2.4

Cisco Unified Computing System E-series Software=3.2.6

Cisco Unified Computing System E-series Software=3.2.7

Cisco Unified Computing System E-series Software=3.2.8

Cisco Unified Computing System E-series Software=3.2.10

Cisco Unified Computing System E-series Software=3.2.11.1

Cisco Unified Computing System E-series Software=3.2.11.3

Cisco Unified Computing System E-series Software=3.2.11.5

Cisco Unified Computing System E-series Software=3.2.12.2

Cisco Unified Computing System E-series Software=3.2.13.6

Cisco Unified Computing System E-series Software=3.2.14

Cisco Unified Computing System E-series Software=3.2.15

Cisco Unified Computing System E-series Software=3.2.15.3

Cisco Unified Computing System E-series Software=3.2.16.1

Cisco Unified Computing System E-series Software=4.00

Cisco Unified Computing System E-series Software=4.02

Cisco Unified Computing System E-series Software=4.11.1

Cisco Unified Computing System E-series Software=4.12.1

Cisco Unified Computing System E-series Software=4.12.2

Cisco Unified Computing System E-series Software=4.15.2

Event History

Apr 1, 2026

CVE Published

via MITRE·04:34 PM

Data Sourced

via MITRE·04:34 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:28 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-20089?

The severity of CVE-2026-20089 is classified as high due to the potential for authenticated remote attackers to perform stored XSS attacks.

How do I fix CVE-2026-20089?

To fix CVE-2026-20089, upgrade to the latest version of Cisco Integrated Management Controller as provided in Cisco security advisories.

Who is affected by CVE-2026-20089?

CVE-2026-20089 affects users of the Cisco Integrated Management Controller who have administrative privileges.

What type of attack is possible due to CVE-2026-20089?

CVE-2026-20089 allows an authenticated attacker to conduct stored Cross-Site Scripting (XSS) attacks.

What should I do if I believe I am a victim of CVE-2026-20089?

If you suspect you have been affected by CVE-2026-20089, you should immediately review user activity and update your Cisco Integrated Management Controller.