cisco-sa-dcnm-xss-JnHSWG5C: Cisco Data Center Network Manager Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of the affected software. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-JnHSWG5C
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-dcnm-xss-JnHSWG5C?
The severity of cisco-sa-dcnm-xss-JnHSWG5C is classified as high due to the potential for cross-site scripting attacks.
How do I fix cisco-sa-dcnm-xss-JnHSWG5C?
To mitigate cisco-sa-dcnm-xss-JnHSWG5C, update your Cisco Data Center Network Manager to the latest version provided by Cisco.
Who is affected by cisco-sa-dcnm-xss-JnHSWG5C?
Organizations using the affected versions of Cisco Data Center Network Manager (DCNM) are vulnerable to the cisco-sa-dcnm-xss-JnHSWG5C vulnerability.
What type of attack does cisco-sa-dcnm-xss-JnHSWG5C enable?
cisco-sa-dcnm-xss-JnHSWG5C enables authenticated remote attackers to conduct cross-site scripting (XSS) attacks.
Is user authentication required for exploiting cisco-sa-dcnm-xss-JnHSWG5C?
Yes, user authentication is required for an attacker to exploit the cisco-sa-dcnm-xss-JnHSWG5C vulnerability.