CVE-2018-0186

CVE-2018-0186 affects the web-based UI of Cisco IOS XE Software. The issue arises from insufficient input validation of parameters passed via the Web UI, enabling an unauthenticated, remote attacker to perform cross-site scripting (XSS). A successful exploit could run arbitrary scripts in the UI ...