CVE-2026-20089
EUVD-2026-1794301.04.2026, 17:28
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cisco | enterprise_nfv_infrastructure_software | 3.3.1 |
| cisco | enterprise_nfv_infrastructure_software | 3.4.1 |
| cisco | enterprise_nfv_infrastructure_software | 3.5.1 |
| cisco | enterprise_nfv_infrastructure_software | 3.5.2 |
| cisco | enterprise_nfv_infrastructure_software | 3.6.1 |
| cisco | enterprise_nfv_infrastructure_software | 3.6.2 |
| cisco | enterprise_nfv_infrastructure_software | 3.6.3 |
| cisco | enterprise_nfv_infrastructure_software | 3.7.1 |
| cisco | enterprise_nfv_infrastructure_software | 3.8.1 |
| cisco | enterprise_nfv_infrastructure_software | 3.9.1 |
| cisco | enterprise_nfv_infrastructure_software | 3.9.2 |
| cisco | enterprise_nfv_infrastructure_software | 3.10.1 |
| cisco | enterprise_nfv_infrastructure_software | 3.10.2 |
| cisco | enterprise_nfv_infrastructure_software | 3.10.3 |
| cisco | enterprise_nfv_infrastructure_software | 3.11.1 |
| cisco | enterprise_nfv_infrastructure_software | 3.11.2 |
| cisco | enterprise_nfv_infrastructure_software | 3.11.3 |
| cisco | enterprise_nfv_infrastructure_software | 3.12.1 |
| cisco | enterprise_nfv_infrastructure_software | 3.12.1a:a |
| cisco | enterprise_nfv_infrastructure_software | 3.12.1b:b |
| cisco | enterprise_nfv_infrastructure_software | 3.12.2 |
| cisco | enterprise_nfv_infrastructure_software | 3.12.3 |
| cisco | enterprise_nfv_infrastructure_software | 4.1.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.1.2 |
| cisco | enterprise_nfv_infrastructure_software | 4.2.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.2.2 |
| cisco | enterprise_nfv_infrastructure_software | 4.4.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.4.2 |
| cisco | enterprise_nfv_infrastructure_software | 4.4.3 |
| cisco | enterprise_nfv_infrastructure_software | 4.5.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.6.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.6.2 |
| cisco | enterprise_nfv_infrastructure_software | 4.6.2-fc2 |
| cisco | enterprise_nfv_infrastructure_software | 4.6.2-fc3 |
| cisco | enterprise_nfv_infrastructure_software | 4.6.3 |
| cisco | enterprise_nfv_infrastructure_software | 4.6.3-fc4 |
| cisco | enterprise_nfv_infrastructure_software | 4.6.4 |
| cisco | enterprise_nfv_infrastructure_software | 4.6.5-es1 |
| cisco | enterprise_nfv_infrastructure_software | 4.7.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.8.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.8.2 |
| cisco | enterprise_nfv_infrastructure_software | 4.9.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.9.2 |
| cisco | enterprise_nfv_infrastructure_software | 4.9.2-fc5 |
| cisco | enterprise_nfv_infrastructure_software | 4.9.3 |
| cisco | enterprise_nfv_infrastructure_software | 4.9.4 |
| cisco | enterprise_nfv_infrastructure_software | 4.9.4-es8 |
| cisco | enterprise_nfv_infrastructure_software | 4.9.4-es9 |
| cisco | enterprise_nfv_infrastructure_software | 4.9.4-fc3 |
| cisco | enterprise_nfv_infrastructure_software | 4.9.5 |
| cisco | enterprise_nfv_infrastructure_software | 4.9.6 |
| cisco | enterprise_nfv_infrastructure_software | 4.10.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.11.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.12.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.12.2 |
| cisco | enterprise_nfv_infrastructure_software | 4.12.3 |
| cisco | enterprise_nfv_infrastructure_software | 4.12.4 |
| cisco | enterprise_nfv_infrastructure_software | 4.12.5 |
| cisco | enterprise_nfv_infrastructure_software | 4.12.6 |
| cisco | enterprise_nfv_infrastructure_software | 4.13.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.14.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.15.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.15.2 |
| cisco | enterprise_nfv_infrastructure_software | 4.15.3 |
| cisco | enterprise_nfv_infrastructure_software | 4.15.4 |
| cisco | enterprise_nfv_infrastructure_software | 4.16.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.18.1 |
| cisco | enterprise_nfv_infrastructure_software | 4.18.2 |
| cisco | enterprise_nfv_infrastructure_software | 4.18.2a:a |
| cisco | unified_computing_system | 3.1\(1d\) |
| cisco | unified_computing_system | 3.1\(2b\) |
| cisco | unified_computing_system | 3.1\(2c\) |
| cisco | unified_computing_system | 3.1\(2d\) |
| cisco | unified_computing_system | 3.1\(2e\) |
| cisco | unified_computing_system | 3.1\(2g\) |
| cisco | unified_computing_system | 3.1\(2i\) |
| cisco | unified_computing_system | 3.1\(3a\) |
| cisco | unified_computing_system | 3.1\(3b\) |
| cisco | unified_computing_system | 3.1\(3c\) |
| cisco | unified_computing_system | 3.1\(3d\) |
| cisco | unified_computing_system | 3.1\(3g\) |
| cisco | unified_computing_system | 3.1\(3h\) |
| cisco | unified_computing_system | 3.1\(3i\) |
| cisco | unified_computing_system | 3.1\(3j\) |
| cisco | unified_computing_system | 3.1\(3k\) |
| cisco | unified_computing_system | 4.0\(1.240\) |
| cisco | unified_computing_system | 4.0\(1a\) |
| cisco | unified_computing_system | 4.0\(1b\) |
| cisco | unified_computing_system | 4.0\(1c\) |
| cisco | unified_computing_system | 4.0\(1d\) |
| cisco | unified_computing_system | 4.0\(1e\) |
| cisco | unified_computing_system | 4.0\(1g\) |
| cisco | unified_computing_system | 4.0\(1h\) |
| cisco | unified_computing_system | 4.0\(2c\) |
| cisco | unified_computing_system | 4.0\(2d\) |
| cisco | unified_computing_system | 4.0\(2f\) |
| cisco | unified_computing_system | 4.0\(2g\) |
| cisco | unified_computing_system | 4.0\(2h\) |
| cisco | unified_computing_system | 4.0\(2i\) |
| cisco | unified_computing_system | 4.0\(2k\) |
| cisco | unified_computing_system | 4.0\(2l\) |
| cisco | unified_computing_system | 4.0\(2m\) |
| cisco | unified_computing_system | 4.0\(2n\) |
| cisco | unified_computing_system | 4.0\(2o\) |
| cisco | unified_computing_system | 4.0\(2p\) |
| cisco | unified_computing_system | 4.0\(2q\) |
| cisco | unified_computing_system | 4.0\(2r\) |
| cisco | unified_computing_system | 4.0\(4b\) |
| cisco | unified_computing_system | 4.0\(4c\) |
| cisco | unified_computing_system | 4.0\(4d\) |
| cisco | unified_computing_system | 4.0\(4e\) |
| cisco | unified_computing_system | 4.0\(4f\) |
| cisco | unified_computing_system | 4.0\(4h\) |
| cisco | unified_computing_system | 4.0\(4i\) |
| cisco | unified_computing_system | 4.0\(4j\) |
| cisco | unified_computing_system | 4.0\(4k\) |
| cisco | unified_computing_system | 4.0\(4l\) |
| cisco | unified_computing_system | 4.0\(4m\) |
| cisco | unified_computing_system | 4.0\(4n\) |
| cisco | unified_computing_system | 4.1\(1c\) |
| cisco | unified_computing_system | 4.1\(1d\) |
| cisco | unified_computing_system | 4.1\(1f\) |
| cisco | unified_computing_system | 4.1\(1g\) |
| cisco | unified_computing_system | 4.1\(1h\) |
| cisco | unified_computing_system | 4.1\(2a\) |
| cisco | unified_computing_system | 4.1\(2b\) |
| cisco | unified_computing_system | 4.1\(2d\) |
| cisco | unified_computing_system | 4.1\(2e\) |
| cisco | unified_computing_system | 4.1\(2f\) |
| cisco | unified_computing_system | 4.1\(2g\) |
| cisco | unified_computing_system | 4.1\(2h\) |
| cisco | unified_computing_system | 4.1\(2j\) |
| cisco | unified_computing_system | 4.1\(2k\) |
| cisco | unified_computing_system | 4.1\(2l\) |
| cisco | unified_computing_system | 4.1\(2m\) |
| cisco | unified_computing_system | 4.1\(3b\) |
| cisco | unified_computing_system | 4.1\(3c\) |
| cisco | unified_computing_system | 4.1\(3d\) |
| cisco | unified_computing_system | 4.1\(3f\) |
| cisco | unified_computing_system | 4.1\(3g\) |
| cisco | unified_computing_system | 4.1\(3h\) |
| cisco | unified_computing_system | 4.1\(3i\) |
| cisco | unified_computing_system | 4.1\(3l\) |
| cisco | unified_computing_system | 4.1\(3m\) |
| cisco | unified_computing_system | 4.1\(3n\) |
| cisco | unified_computing_system | 4.2\(1a\) |
| cisco | unified_computing_system | 4.2\(1b\) |
| cisco | unified_computing_system | 4.2\(1c\) |
| cisco | unified_computing_system | 4.2\(1e\) |
| cisco | unified_computing_system | 4.2\(1f\) |
| cisco | unified_computing_system | 4.2\(1g\) |
| cisco | unified_computing_system | 4.2\(1i\) |
| cisco | unified_computing_system | 4.2\(1j\) |
| cisco | unified_computing_system | 4.2\(2a\) |
| cisco | unified_computing_system | 4.2\(2f\) |
| cisco | unified_computing_system | 4.2\(2g\) |
| cisco | unified_computing_system | 4.2\(3b\) |
| cisco | unified_computing_system | 4.2\(3d\) |
| cisco | unified_computing_system | 4.2\(3e\) |
| cisco | unified_computing_system | 4.2\(3g\) |
| cisco | unified_computing_system | 4.2\(3h\) |
| cisco | unified_computing_system | 4.2\(3i\) |
| cisco | unified_computing_system | 4.2\(3j\) |
| cisco | unified_computing_system | 4.2\(3k\) |
| cisco | unified_computing_system | 4.2\(3l\) |
| cisco | unified_computing_system | 4.2\(3m\) |
| cisco | unified_computing_system | 4.2\(3n\) |
| cisco | unified_computing_system | 4.2\(3o\) |
| cisco | unified_computing_system | 4.2\(3p\) |
| cisco | unified_computing_system | 4.3\(1.230097\) |
| cisco | unified_computing_system | 4.3\(1.230124\) |
| cisco | unified_computing_system | 4.3\(1.230138\) |
| cisco | unified_computing_system | 4.3\(2.230207\) |
| cisco | unified_computing_system | 4.3\(2.230270\) |
| cisco | unified_computing_system | 4.3\(2.240002\) |
| cisco | unified_computing_system | 4.3\(2.240009\) |
| cisco | unified_computing_system | 4.3\(2.240037\) |
| cisco | unified_computing_system | 4.3\(2.240053\) |
| cisco | unified_computing_system | 4.3\(2.240077\) |
| cisco | unified_computing_system | 4.3\(2.240090\) |
| cisco | unified_computing_system | 4.3\(2.240107\) |
| cisco | unified_computing_system | 4.3\(2.250016\) |
| cisco | unified_computing_system | 4.3\(2.250021\) |
| cisco | unified_computing_system | 4.3\(2.250022\) |
| cisco | unified_computing_system | 4.3\(2.250037\) |
| cisco | unified_computing_system | 4.3\(2.250045\) |
| cisco | unified_computing_system | 4.3\(2.250063\) |
| cisco | unified_computing_system | 4.3\(3.240022\) |
| cisco | unified_computing_system | 4.3\(3.240041\) |
| cisco | unified_computing_system | 4.3\(3.240043\) |
| cisco | unified_computing_system | 4.3\(4.240142\) |
| cisco | unified_computing_system | 4.3\(4.240152\) |
| cisco | unified_computing_system | 4.3\(4.241014\) |
| cisco | unified_computing_system | 4.3\(4.241063\) |
| cisco | unified_computing_system | 4.3\(4.242028\) |
| cisco | unified_computing_system | 4.3\(4.242038\) |
| cisco | unified_computing_system | 4.3\(4.242066\) |
| cisco | unified_computing_system | 4.3\(4.252001\) |
| cisco | unified_computing_system | 4.3\(4.252002\) |
| cisco | unified_computing_system | 4.3\(5.240021\) |
| cisco | unified_computing_system | 4.3\(5.250001\) |
| cisco | unified_computing_system | 4.3\(5.250030\) |
| cisco | unified_computing_system | 4.3\(5.250033\) |
| cisco | unified_computing_system | 4.3\(5.250043\) |
| cisco | unified_computing_system | 4.3\(5.250045\) |
| cisco | unified_computing_system | 4.3\(6.250039\) |
| cisco | unified_computing_system | 4.3\(6.250040\) |
| cisco | unified_computing_system | 4.3\(6.250044\) |
| cisco | unified_computing_system | 4.3\(6.250053\) |
| cisco | unified_computing_system | 4.3\(6.250060\) |
| cisco | unified_computing_system | 4.3\(6.250101\) |
| cisco | unified_computing_system | 4.3\(6.250117\) |
| cisco | unified_computing_system | 4.3\(6.260003\) |
| cisco | unified_computing_system | 6.0\(1.250127\) |
| cisco | unified_computing_system | 6.0\(1.250130\) |
| cisco | unified_computing_system | 6.0\(1.250131\) |
| cisco | unified_computing_system | 6.0\(1.250174\) |
| cisco | unified_computing_system | 6.0\(1.250192\) |
| cisco | unified_computing_system | 6.0\(1.250194\) |
| cisco | unified_computing_system_e-series_software | 2.0.0 |
| cisco | unified_computing_system_e-series_software | 2.1.0 |
| cisco | unified_computing_system_e-series_software | 2.2.1 |
| cisco | unified_computing_system_e-series_software | 2.2.2 |
| cisco | unified_computing_system_e-series_software | 2.3.1 |
| cisco | unified_computing_system_e-series_software | 2.3.2 |
| cisco | unified_computing_system_e-series_software | 2.3.3 |
| cisco | unified_computing_system_e-series_software | 2.3.5 |
| cisco | unified_computing_system_e-series_software | 2.4.0 |
| cisco | unified_computing_system_e-series_software | 2.4.1 |
| cisco | unified_computing_system_e-series_software | 2.4.2 |
| cisco | unified_computing_system_e-series_software | 3.0.1 |
| cisco | unified_computing_system_e-series_software | 3.0.2 |
| cisco | unified_computing_system_e-series_software | 3.1.0 |
| cisco | unified_computing_system_e-series_software | 3.1.1 |
| cisco | unified_computing_system_e-series_software | 3.1.2 |
| cisco | unified_computing_system_e-series_software | 3.1.3 |
| cisco | unified_computing_system_e-series_software | 3.1.4 |
| cisco | unified_computing_system_e-series_software | 3.1.5 |
| cisco | unified_computing_system_e-series_software | 3.2.1 |
| cisco | unified_computing_system_e-series_software | 3.2.2 |
| cisco | unified_computing_system_e-series_software | 3.2.3 |
| cisco | unified_computing_system_e-series_software | 3.2.4 |
| cisco | unified_computing_system_e-series_software | 3.2.6 |
| cisco | unified_computing_system_e-series_software | 3.2.7 |
| cisco | unified_computing_system_e-series_software | 3.2.8 |
| cisco | unified_computing_system_e-series_software | 3.2.10 |
| cisco | unified_computing_system_e-series_software | 3.2.11.1 |
| cisco | unified_computing_system_e-series_software | 3.2.11.3 |
| cisco | unified_computing_system_e-series_software | 3.2.11.5 |
| cisco | unified_computing_system_e-series_software | 3.2.12.2 |
| cisco | unified_computing_system_e-series_software | 3.2.13.6 |
| cisco | unified_computing_system_e-series_software | 3.2.14 |
| cisco | unified_computing_system_e-series_software | 3.2.15 |
| cisco | unified_computing_system_e-series_software | 3.2.15.3 |
| cisco | unified_computing_system_e-series_software | 3.2.16.1 |
| cisco | unified_computing_system_e-series_software | 4.00 |
| cisco | unified_computing_system_e-series_software | 4.02 |
| cisco | unified_computing_system_e-series_software | 4.11.1 |
| cisco | unified_computing_system_e-series_software | 4.12.1 |
| cisco | unified_computing_system_e-series_software | 4.12.2 |
| cisco | unified_computing_system_e-series_software | 4.15.2 |
𝑥
= Vulnerable software versions