Lucene search
CiscoCVELIST:CVE-2024-20369HistoryMay 15, 2024 - 5:23 p.m.
CVE-2024-20369
2024-05-1517:23:34
cisco
www.cve.org
1
cisco crosswork network services orchestrator
web-based management interface
unauthenticated attacker
input validation
http request
crafted link
exploit
malicious website
4.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
5.1 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
26.1%
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.
This vulnerability is due to improper input validation of a parameter in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.
CNA Affected
[
{
"vendor": "Cisco",
"product": "Cisco Network Services Orchestrator",
"versions": [
{
"version": "5.4",
"status": "affected"
},
{
"version": "5.5",
"status": "affected"
},
{
"version": "5.6",
"status": "affected"
},
{
"version": "5.7",
"status": "affected"
},
{
"version": "5.8",
"status": "affected"
},
{
"version": "5.1.1.1",
"status": "affected"
},
{
"version": "5.1.1.3",
"status": "affected"
},
{
"version": "5.1.2",
"status": "affected"
},
{
"version": "5.2.0.4",
"status": "affected"
},
{
"version": "5.2.1",
"status": "affected"
},
{
"version": "5.2.1.1",
"status": "affected"
},
{
"version": "5.2.3.2",
"status": "affected"
},
{
"version": "5.3.1",
"status": "affected"
},
{
"version": "5.3.4.3",
"status": "affected"
},
{
"version": "5.4.0.1",
"status": "affected"
},
{
"version": "5.4.1",
"status": "affected"
},
{
"version": "5.4.1.1",
"status": "affected"
},
{
"version": "5.4.2",
"status": "affected"
},
{
"version": "5.4.3.1",
"status": "affected"
},
{
"version": "5.4.4.1",
"status": "affected"
},
{
"version": "5.4.4",
"status": "affected"
},
{
"version": "5.4.4.3",
"status": "affected"
},
{
"version": "5.4.3.3",
"status": "affected"
},
{
"version": "5.4.5.1",
"status": "affected"
},
{
"version": "5.4.5.2",
"status": "affected"
},
{
"version": "5.4.5",
"status": "affected"
},
{
"version": "5.4.6",
"status": "affected"
},
{
"version": "5.4.7",
"status": "affected"
},
{
"version": "5.4.7.1",
"status": "affected"
},
{
"version": "5.5.1",
"status": "affected"
},
{
"version": "5.5.2",
"status": "affected"
},
{
"version": "5.5.2.1",
"status": "affected"
},
{
"version": "5.5.2.3",
"status": "affected"
},
{
"version": "5.5.2.4",
"status": "affected"
},
{
"version": "5.5.2.9",
"status": "affected"
},
{
"version": "5.5.2.10",
"status": "affected"
},
{
"version": "5.5.3",
"status": "affected"
},
{
"version": "5.5.2.7",
"status": "affected"
},
{
"version": "5.5.2.12",
"status": "affected"
},
{
"version": "5.5.4.1",
"status": "affected"
},
{
"version": "5.5.3.1",
"status": "affected"
},
{
"version": "5.5.5",
"status": "affected"
},
{
"version": "5.5.6",
"status": "affected"
},
{
"version": "5.5.7",
"status": "affected"
},
{
"version": "5.5.8",
"status": "affected"
},
{
"version": "5.6.1",
"status": "affected"
},
{
"version": "5.6.3",
"status": "affected"
},
{
"version": "5.6.2",
"status": "affected"
},
{
"version": "5.6.5",
"status": "affected"
},
{
"version": "5.6.6",
"status": "affected"
},
{
"version": "5.6.6.1",
"status": "affected"
},
{
"version": "5.6.7",
"status": "affected"
},
{
"version": "5.6.7.1",
"status": "affected"
},
{
"version": "5.6.8",
"status": "affected"
},
{
"version": "5.6.8.1",
"status": "affected"
},
{
"version": "5.6.11",
"status": "affected"
},
{
"version": "5.6.13",
"status": "affected"
},
{
"version": "5.6.14",
"status": "affected"
},
{
"version": "5.6.14.1",
"status": "affected"
},
{
"version": "5.7.1.1",
"status": "affected"
},
{
"version": "5.7.1",
"status": "affected"
},
{
"version": "5.7.2",
"status": "affected"
},
{
"version": "5.7.2.1",
"status": "affected"
},
{
"version": "5.7.3",
"status": "affected"
},
{
"version": "5.7.4",
"status": "affected"
},
{
"version": "5.7.5",
"status": "affected"
},
{
"version": "5.7.5.1",
"status": "affected"
},
{
"version": "5.7.6",
"status": "affected"
},
{
"version": "5.7.6.2",
"status": "affected"
},
{
"version": "5.7.8",
"status": "affected"
},
{
"version": "5.7.10",
"status": "affected"
},
{
"version": "5.7.10.2",
"status": "affected"
},
{
"version": "5.7.11",
"status": "affected"
},
{
"version": "5.7.13",
"status": "affected"
},
{
"version": "5.7.14",
"status": "affected"
},
{
"version": "5.7.9",
"status": "affected"
},
{
"version": "5.7.9.1",
"status": "affected"
},
{
"version": "5.8.1",
"status": "affected"
},
{
"version": "5.8.2",
"status": "affected"
},
{
"version": "5.8.2.1",
"status": "affected"
},
{
"version": "5.8.5",
"status": "affected"
},
{
"version": "5.8.10",
"status": "affected"
},
{
"version": "5.8.11",
"status": "affected"
},
{
"version": "5.8.9",
"status": "affected"
},
{
"version": "6.1",
"status": "affected"
},
{
"version": "6.2",
"status": "affected"
},
{
"version": "6.0.1.1",
"status": "affected"
},
{
"version": "6.0.10",
"status": "affected"
},
{
"version": "6.0.5",
"status": "affected"
},
{
"version": "6.0.8",
"status": "affected"
},
{
"version": "6.1.2.1",
"status": "affected"
},
{
"version": "6.1.5",
"status": "affected"
},
{
"version": "6.1.6",
"status": "affected"
}
]
}
]Related
cisco
cisco
Cisco Crosswork Network Services Orchestrator Open Redirect Vulnerability
2024-05-15 16:00:00
cve
cve
CVE-2024-20369
2024-05-15 18:15:09
nvd
nvd
CVE-2024-20369
2024-05-15 18:15:09
vulnrichment
vulnrichment
CVE-2024-20369
2024-05-15 17:23:34
4.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
5.1 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
26.1%
Related for CVELIST:CVE-2024-20369