Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-80113
HistoryOct 07, 2023 - 12:00 a.m.

Cisco Catalyst SD-WAN Manager HTML Injection Vulnerability

2023-10-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
cisco
catalyst
sd-wan
html injection
vulnerability
validation
user-supplied data
remote attacker

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

21.3%

Cisco Catalyst is a series of switches from the American company Cisco. An HTML injection vulnerability exists in Cisco Catalyst SD-WAN Manager that stems from improper validation of user-supplied data in element fields and can be exploited by an authenticated, remote attacker to inject HTML content.

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

21.3%