Vulnerability Details CVE-2020-3356
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by interacting with the interface in a way that injects malicious content in a log file. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.6%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2020-3356
-
cpe:2.3:a:cisco:data_center_network_manager:-
-
cpe:2.3:a:cisco:data_center_network_manager:10.0
-
cpe:2.3:a:cisco:data_center_network_manager:10.1
-
cpe:2.3:a:cisco:data_center_network_manager:10.2(1)
-
cpe:2.3:a:cisco:data_center_network_manager:10.3(1)
-
cpe:2.3:a:cisco:data_center_network_manager:10.3(1)s3
-
cpe:2.3:a:cisco:data_center_network_manager:10.4(1)
-
cpe:2.3:a:cisco:data_center_network_manager:10.4(1.128)
-
cpe:2.3:a:cisco:data_center_network_manager:10.4(2)
-
cpe:2.3:a:cisco:data_center_network_manager:11.0(1)
-
cpe:2.3:a:cisco:data_center_network_manager:11.1(1)
-
cpe:2.3:a:cisco:data_center_network_manager:11.2(1)
-
cpe:2.3:a:cisco:data_center_network_manager:11.3(1)
-
cpe:2.3:a:cisco:data_center_network_manager:4.0
-
cpe:2.3:a:cisco:data_center_network_manager:4.1
-
cpe:2.3:a:cisco:data_center_network_manager:4.2
-
cpe:2.3:a:cisco:data_center_network_manager:5.0
-
cpe:2.3:a:cisco:data_center_network_manager:5.2(1)