EUVD-2019-6913

Malware in sbrugna...

CVE-2019-16024: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Crosswork Change Automation could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to...

PT-2020-1652

Name of the Vulnerable Software and Affected Versions Cisco Crosswork Change Automation affected versions not specified Description The issue exists due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduct...

Cisco Crosswork Change Automation CVE-2019-16024 Cross Site Scripting Vulnerability

Description Cisco Crosswork Change Automation is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...