Description
A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an authenticated, remote attacker to perform a reflected cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco AppDynamics
21.2.0affected21.2.1affected21.2.2affected21.2.3affected21.2.6affected21.2.7affected21.2.8affected21.4.0affected21.4.10affected21.4.11affected21.4.2affected21.4.3affected21.4.4affected21.4.5affected21.4.6affected21.4.7affected21.4.8affected21.4.9affected21.11.0affected21.5.0affected21.6.0affected21.12.0affected21.12.2affected21.12.1affected22.1.0affected22.1.1affected22.11.0affected22.3.0affected22.10.0affected22.12.0affected22.12.1affected21.7.0affected22.8.0affected23.2.0affected23.4.0affected23.7.1affected23.7.0affected