Vulnerability Details CVE-2020-3348
Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface on an affected device. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a customized link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.3%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 3.5
References
Products affected by CVE-2020-3348
-
cpe:2.3:a:cisco:data_center_network_manager:-
-
cpe:2.3:a:cisco:data_center_network_manager:10.0
-
cpe:2.3:a:cisco:data_center_network_manager:10.1
-
cpe:2.3:a:cisco:data_center_network_manager:10.2(1)
-
cpe:2.3:a:cisco:data_center_network_manager:10.3(1)
-
cpe:2.3:a:cisco:data_center_network_manager:10.3(1)s3
-
cpe:2.3:a:cisco:data_center_network_manager:10.4(1)
-
cpe:2.3:a:cisco:data_center_network_manager:10.4(1.128)
-
cpe:2.3:a:cisco:data_center_network_manager:10.4(2)
-
cpe:2.3:a:cisco:data_center_network_manager:11.0(1)
-
cpe:2.3:a:cisco:data_center_network_manager:11.1(1)
-
cpe:2.3:a:cisco:data_center_network_manager:11.2(1)
-
cpe:2.3:a:cisco:data_center_network_manager:11.3(1)
-
cpe:2.3:a:cisco:data_center_network_manager:4.0
-
cpe:2.3:a:cisco:data_center_network_manager:4.1
-
cpe:2.3:a:cisco:data_center_network_manager:4.2
-
cpe:2.3:a:cisco:data_center_network_manager:5.0
-
cpe:2.3:a:cisco:data_center_network_manager:5.2(1)