CVE-2026-20198: Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

2 karet z 2 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-20198

EPSS 0.00 EPSS k 2. 11. 2026

Hodnocení závažnosti

4.8 CVSS 3.1 cisco

útok odkudkoli z internetu bez přípravy nutná práva správce nutný zásah uživatele

dopad únik části dat dílčí změna dat bez výpadku

přesah dopad i mimo zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

cve.org · NVD

5. 8. 2026 18:01

Cisco Advance Notification for Publication of August 5, 2026, Security Advisories

On August 5, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026 CVE-2026-20303CVE-2026-20304CVE-2026-20310CVE-2026-20312CVE-2026-20313 Critical 9.9 Cisco IOS XE Software Security Hardening Release: August 2026 CVE-2026-20267CVE-2026-20268CVE-2026-20269CVE-2026-20270CVE-2026-20271CVE-2026-20272CVE-2026-20273…

EPSS 0.01 CVE-2026-20028 CVE-2026-20124 CVE-2026-20198 CVE-2026-20263 CVE-2026-20289 CVE-2026-20294 CVE-2026-20301 CVE-2026-20311 Cisco US

5. 8. 2026 18:01 · Cisco PSIRT · Cisco Advance Notification for Publication of August 5, 2026, Security Advisories

5. 8. 2026 18:00

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the…

EPSS 0.00 CVE-2026-20198 Cisco US

5. 8. 2026 18:00 · Cisco PSIRT · Cisco Integrated Management Controller Cross-Site Scripting Vulnerability