Description
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to inject HTML content. This vulnerability is due to improper validation of user-supplied data in element fields. An attacker could exploit this vulnerability by submitting malicious content within requests and persuading a user to view a page that contains injected content. A successful exploit could allow the attacker to modify pages within the web-based management interface, possibly leading to further browser-based attacks against users of the application.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco SD-WAN vManage
20.3.1affected20.3.2affected20.3.2.1affected20.3.3affected20.3.3.1affected20.3.4affected20.3.4.1affected20.3.4.2affected20.3.5affected20.3.6affected20.3.7affected20.3.7.1affected20.3.4.3affected20.3.5.1affected20.3.7.2affected20.4.1affected20.4.1.1affected20.4.1.2affected20.4.2affected20.4.2.2affected20.4.2.1affected20.4.2.3affected20.5.1affected20.5.1.2affected20.5.1.1affected20.6.1affected20.6.1.1affected20.6.2.1affected20.6.2.2affected20.6.2affected20.6.3affected20.6.3.1affected20.6.4affected20.6.5affected20.6.5.1affected20.6.1.2affected20.6.3.2affected20.6.4.1affected20.6.5.2affected20.6.5.4affected20.6.3.3affected20.6.4.2affected20.6.3.0.45affected20.6.3.0.46affected20.6.3.0.47affected20.6.3.4affected20.6.4.0.21affected20.6.5.1.10affected20.6.5.1.7affected20.6.5.1.9affected20.6.5.2.4affected20.6.5.5affected20.7.1affected20.7.1.1affected20.7.2affected20.8.1affected20.9.1affected20.9.2affected20.9.2.1affected20.9.3affected20.9.3.1affected20.9.2.3affected20.9.3.0.12affected20.9.3.0.16affected20.9.3.0.17affected20.9.3.0.18affected20.9.3.2affected20.9.3.2_LI_Imagesaffected20.9.4affected20.10.1affected20.10.1.1affected20.10.1.2affected20.11.1affected20.11.1.1affected20.11.1.2affected