cisco-sa-20190605-ind-xss: Cisco Industrial Network Director Stored Cross-Site Scripting Vulnerability
A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests containing malicious values to the affected system. A successful exploit could allow the attacker to conduct XSS attacks. There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-ind-xss
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190605-ind-xss?
The severity of cisco-sa-20190605-ind-xss is considered high due to its potential to enable stored cross-site scripting attacks.
How do I fix cisco-sa-20190605-ind-xss?
To fix cisco-sa-20190605-ind-xss, ensure that you are using the latest version of Cisco Industrial Network Director that addresses this vulnerability.
Who is affected by cisco-sa-20190605-ind-xss?
Organizations using Cisco Industrial Network Director are affected by cisco-sa-20190605-ind-xss.
What type of attacks can be executed through cisco-sa-20190605-ind-xss?
cisco-sa-20190605-ind-xss can be exploited to perform stored cross-site scripting attacks, allowing unauthorized scripts to run in users' browsers.
Is authentication required to exploit cisco-sa-20190605-ind-xss?
Yes, an attacker must be an authenticated user to exploit the cisco-sa-20190605-ind-xss vulnerability.