Cisco Security Manager Cross-Site Scripting Vulnerability (CNVD-2022-06378)

Cisco Security Manager (CSM) is a set of enterprise-class management applications from Cisco, which are used to configure firewall, VPN, and intrusion protection security services on Cisco networks and security devices. cross-site scripting vulnerability exists in Cisco Security Manager, which stems from the product’s Web-based The vulnerability stems from the product’s Web-based management interface does not effectively handle special characters for user input data, and an attacker could use the vulnerability to execute arbitrary script code or access sensitive, browser-based information in the context of the interface.