CVE-2018-0188

🗓️ 28 Mar 2018 22:00:00Reported by ciscoType

Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation of certain parameters that are passed to the affected software via the web UI. An attacker could exploit these vulnerabilities by persuading a user of the affected UI to access a malicious link or by intercepting a user request for the affected UI and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script

Reporter	Title	Published	Views	Family All 8
Tenable Nessus	Cisco IOS XE Software Web UI Cross-Site Scripting Multiple Vulnerabilities (cisco-sa-20180328-webuixss)	13 Dec 201900:00	–	nessus
CNVD	Cisco IOS XE Cross-Site Scripting Vulnerability	29 Mar 201800:00	–	cnvd
Cvelist	CVE-2018-0188	28 Mar 201822:00	–	cvelist
EUVD	EUVD-2018-1011	7 Oct 202500:30	–	euvd
NVD	CVE-2018-0188	28 Mar 201822:29	–	nvd
OSV	CVE-2018-0188	28 Mar 201822:29	–	osv
Prion	Cross site scripting	28 Mar 201822:29	–	prion
Vulnrichment	CVE-2018-0188	28 Mar 201822:00	–	vulnrichment

NVD

Node

cisco ios_xeRange<16.3.6

[
  {
    "product": "Cisco IOS XE",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco IOS XE"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/103551
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-webuixss

21 Nov 2024 03:37Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.3

CVSS 36.1

EPSS0.00298

SSVC

CWE-79