Cisco Security Manager Cross-Site Scripting Vulnerability (CNVD-2022-04814)

Cisco Security Manager (CSM) is a set of enterprise-class management applications from Cisco, which is mainly used to configure firewall, VPN and intrusion protection security services on Cisco networks and security devices.A cross-site scripting vulnerability exists in Cisco Security Manager, which stems from the product’s Web-based management interface not effectively handling special characters for user input data. Web-based management interface does not effectively handle special characters for user input data. An attacker could execute arbitrary script code in the context of the interface or access sensitive, browser-based information through this vulnerability.