Description
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco Network Services Orchestrator
5.4affected5.5affected5.6affected5.7affected5.8affected5.1.1.1affected5.1.1.3affected5.1.2affected5.2.0.4affected5.2.1affected5.2.1.1affected5.2.3.2affected5.3.1affected5.3.4.3affected5.4.0.1affected5.4.1affected5.4.1.1affected5.4.2affected5.4.3.1affected5.4.4.1affected5.4.4affected5.4.4.3affected5.4.3.3affected5.4.5.1affected5.4.5.2affected5.4.5affected5.4.6affected5.4.7affected5.4.7.1affected5.5.1affected5.5.2affected5.5.2.1affected5.5.2.3affected5.5.2.4affected5.5.2.9affected5.5.2.10affected5.5.3affected5.5.2.7affected5.5.2.12affected5.5.4.1affected5.5.3.1affected5.5.5affected5.5.6affected5.5.7affected5.5.8affected5.6.1affected5.6.3affected5.6.2affected5.6.5affected5.6.6affected5.6.6.1affected5.6.7affected5.6.7.1affected5.6.8affected5.6.8.1affected5.6.11affected5.6.13affected5.6.14affected5.6.14.1affected5.7.1.1affected5.7.1affected5.7.2affected5.7.2.1affected5.7.3affected5.7.4affected5.7.5affected5.7.5.1affected5.7.6affected5.7.6.2affected5.7.8affected5.7.10affected5.7.10.2affected5.7.11affected5.7.13affected5.7.14affected5.7.9affected5.7.9.1affected5.8.1affected5.8.2affected5.8.2.1affected5.8.5affected5.8.10affected5.8.11affected5.8.9affected6.1affected6.2affected6.0.1.1affected6.0.10affected6.0.5affected6.0.8affected6.1.2.1affected6.1.5affected6.1.6affected