Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-20089

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Enterprise NFV Infrastructure Software

Default version status: unknown

  • 4.1.1affected
  • 3.9.1affected
  • 3.5.2affected
  • 3.12.2affected
  • 3.6.2affected
  • 3.9.2affected
  • 3.11.3affected
  • 3.11.1affected
  • 3.5.1affected
  • 3.3.1affected
  • 3.10.2affected
  • 3.12.1baffected
  • 3.4.1affected
  • 3.12.1aaffected
  • 3.6.3affected
  • 3.8.1affected
  • 3.11.2affected
  • 3.12.1affected
  • 3.12.3affected
  • 3.10.1affected
  • 3.6.1affected
  • 3.10.3affected
  • 3.7.1affected
  • 4.1.2affected
  • 4.2.1affected
  • 4.2.2affected
  • 4.4.1affected
  • 4.4.2affected
  • 4.5.1affected
  • 4.4.3affected
  • 4.6.1affected
  • 4.7.1affected
  • 4.6.2-FC2affected
  • 4.6.2-FC3affected
  • 4.6.2affected
  • 4.8.1affected
  • 4.8.2affected
  • 4.9.1affected
  • 4.6.3affected
  • 4.9.2-FC5affected
  • 4.9.2affected
  • 4.10.1affected
  • 4.9.3affected
  • 4.11.1affected
  • 4.9.4affected
  • 4.12.1affected
  • 4.6.4affected
  • 4.12.2affected
  • 4.13.1affected
  • 4.9.4-ES8affected
  • 4.9.5affected
  • 4.12.3affected
  • 4.6.5-ES1affected
  • 4.9.4-ES9affected
  • 4.14.1affected
  • 4.6.3-FC4affected
  • 4.9.4-FC3affected
  • 4.12.4affected
  • 4.15.1affected
  • 4.9.6affected
  • 4.16.1affected
  • 4.15.2affected
  • 4.12.5affected
  • 4.15.3affected
  • 4.15.4affected
  • 4.18.1affected
  • 4.12.6affected
  • 4.18.2affected
  • 4.18.2aaffected

Cisco Cisco Unified Computing System (Standalone)

Default version status: unknown

  • 4.0(2g)affected
  • 3.1(2i)affected
  • 3.1(1d)affected
  • 4.0(4i)affected
  • 4.1(1c)affected
  • 4.0(2c)affected
  • 4.0(1e)affected
  • 4.0(2h)affected
  • 4.0(4h)affected
  • 4.0(1h)affected
  • 4.0(2l)affected
  • 3.1(3g)affected
  • 4.0(1.240)affected
  • 4.0(2f)affected
  • 4.0(1g)affected
  • 4.0(2i)affected
  • 3.1(3i)affected
  • 4.0(4d)affected
  • 4.1(1d)affected
  • 3.1(3c)affected
  • 4.0(4k)affected
  • 3.1(2d)affected
  • 3.1(3a)affected
  • 3.1(3j)affected
  • 4.0(2d)affected
  • 4.1(1f)affected
  • 4.0(4j)affected
  • 4.0(2m)affected
  • 4.0(2k)affected
  • 4.0(1c)affected
  • 4.0(4f)affected
  • 4.0(4c)affected
  • 3.1(3d)affected
  • 3.1(2g)affected
  • 3.1(2c)affected
  • 4.0(1d)affected
  • 3.1(2e)affected
  • 4.0(1a)affected
  • 4.0(1b)affected
  • 3.1(3b)affected
  • 4.0(4b)affected
  • 3.1(2b)affected
  • 4.0(4e)affected
  • 3.1(3h)affected
  • 4.0(4l)affected
  • 4.1(1g)affected
  • 4.1(2a)affected
  • 4.0(2n)affected
  • 4.1(1h)affected
  • 3.1(3k)affected
  • 4.1(2b)affected
  • 4.0(2o)affected
  • 4.0(4m)affected
  • 4.1(2d)affected
  • 4.1(3b)affected
  • 4.0(2p)affected
  • 4.1(2e)affected
  • 4.1(2f)affected
  • 4.0(4n)affected
  • 4.0(2q)affected
  • 4.1(3c)affected
  • 4.0(2r)affected
  • 4.1(3d)affected
  • 4.1(2g)affected
  • 4.1(2h)affected
  • 4.1(3g)affected
  • 4.1(3f)affected
  • 4.1(2j)affected
  • 4.1(2k)affected
  • 4.1(3h)affected
  • 4.2(2a)affected
  • 4.1(3i)affected
  • 4.2(2f)affected
  • 4.2(2g)affected
  • 4.2(3b)affected
  • 4.1(3l)affected
  • 4.2(3d)affected
  • 4.3(1.230097)affected
  • 4.2(1e)affected
  • 4.2(1b)affected
  • 4.2(1j)affected
  • 4.2(1i)affected
  • 4.2(1f)affected
  • 4.2(1a)affected
  • 4.2(1c)affected
  • 4.2(1g)affected
  • 4.3(1.230124)affected
  • 4.1(2l)affected
  • 4.2(3e)affected
  • 4.3(1.230138)affected
  • 4.2(3g)affected
  • 4.3(2.230207)affected
  • 4.2(3h)affected
  • 4.2(3i)affected
  • 4.3(2.230270)affected
  • 4.1(3m)affected
  • 4.1(2m)affected
  • 4.3(2.240002)affected
  • 4.3(3.240022)affected
  • 4.2(3j)affected
  • 4.1(3n)affected
  • 4.3(2.240009)affected
  • 4.3(3.240041)affected
  • 4.2(3k)affected
  • 4.3(3.240043)affected
  • 4.3(4.240142)affected
  • 4.3(2.240037)affected
  • 4.3(2.240053)affected
  • 4.3(4.240152)affected
  • 4.2(3l)affected
  • 4.3(2.240077)affected
  • 4.3(4.242028)affected
  • 4.3(4.241063)affected
  • 4.3(4.242038)affected
  • 4.2(3m)affected
  • 4.3(2.240090)affected
  • 4.3(5.240021)affected
  • 4.3(2.240107)affected
  • 4.3(4.242066)affected
  • 4.2(3n)affected
  • 4.3(5.250001)affected
  • 4.2(3o)affected
  • 4.3(2.250016)affected
  • 4.3(2.250021)affected
  • 4.3(5.250030)affected
  • 4.3(2.250022)affected
  • 4.3(6.250039)affected
  • 4.3(6.250040)affected
  • 4.3(5.250033)affected
  • 4.3(6.250044)affected
  • 4.3(6.250053)affected
  • 4.3(2.250037)affected
  • 4.3(2.250045)affected
  • 4.3(4.252001)affected
  • 4.3(4.252002)affected
  • 6.0(1.250127)affected
  • 4.2(3p)affected
  • 6.0(1.250131)affected
  • 4.3(6.250101)affected
  • 6.0(1.250174)affected
  • 4.3(6.250117)affected
  • 4.3(5.250043)affected
  • 4.3(5.250045)affected
  • 4.3(6.250060)affected
  • 6.0(1.250130)affected
  • 4.3(4.241014)affected
  • 4.3(2.250063)affected
  • 6.0(1.250192)affected
  • 4.3(6.260003)affected
  • 6.0(1.250194)affected

Cisco Cisco Unified Computing System E-Series Software (UCSE)

Default version status: unknown

  • 3.2.7affected
  • 3.2.6affected
  • 3.2.4affected
  • 3.2.10affected
  • 3.2.2affected
  • 3.2.3affected
  • 2.4.0affected
  • 3.2.1affected
  • 3.2.11.1affected
  • 3.2.8affected
  • 3.1.1affected
  • 3.0.2affected
  • 2.1.0affected
  • 2.2.2affected
  • 3.1.2affected
  • 3.0.1affected
  • 2.3.2affected
  • 2.3.5affected
  • 2.2.1affected
  • 3.1.4affected
  • 2.4.1affected
  • 2.3.1affected
  • 3.1.3affected
  • 2.3.3affected
  • 2.4.2affected
  • 3.1.5affected
  • 3.1.0affected
  • 2.0.0affected
  • 3.2.11.3affected
  • 3.2.11.5affected
  • 3.2.12.2affected
  • 3.2.13.6affected
  • 3.2.14affected
  • 4.11.1affected
  • 3.2.15affected
  • 4.12.1affected
  • 3.2.15.3affected
  • 4.12.2affected
  • 3.2.16.1affected
  • 4.00affected
  • 4.15.2affected
  • 4.02affected

References