CVE-2019-12718

Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability

Published Oct 16, 2019 CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Description
A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link and subsequently access a specific web interface page. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2019-4309 A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link and subsequently access a specific web interface page. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Cisco Sf200-24 Sf200-24 Firmware Sf200-24fp Sf200-24fp Firmware Sf200-24p Sf200-24p Firmware Sf200-48 Sf200-48 Firmware Sf200-48p Sf200-48p Firmware Sf200e-24 Sf200e-24 Firmware Sf200e-24p Sf200e-24p Firmware Sf200e-48 Sf200e-48 Firmware Sf200e48p Sf200e48p Firmware Sf250-08 Sf250-08 Firmware Sf250-08hp Sf250-08hp Firmware Sf250-10p Sf250-10p Firmware Sf250-18 Sf250-18 Firmware Sf250-24 Sf250-24 Firmware Sf250-24p Sf250-24p Firmware Sf250-26 Sf250-26 Firmware Sf250-26hp Sf250-26hp Firmware Sf250-26p Sf250-26p Firmware Sf250-48 Sf250-48 Firmware Sf250-48hp Sf250-48hp Firmware Sf250-50 Sf250-50 Firmware Sf250-50hp Sf250-50hp Firmware Sf250-50p Sf250-50p Firmware Sf250x-24 Sf250x-24 Firmware Sf250x-24p Sf250x-24p Firmware Sf250x-48 Sf250x-48 Firmware Sf250x-48p Sf250x-48p Firmware Sf300-08 Sf300-08 Firmware Sf300-24 Sf300-24 Firmware Sf300-24mp Sf300-24mp Firmware Sf300-24p Sf300-24p Firmware Sf300-24pp Sf300-24pp Firmware Sf300-48 Sf300-48 Firmware Sf300-48p Sf300-48p Firmware Sf300-48pp Sf300-48pp Firmware Sf302-08 Sf302-08 Firmware Sf302-08mp Sf302-08mp Firmware Sf302-08mpp Sf302-08mpp Firmware Sf302-08p Sf302-08p Firmware Sf302-08pp Sf302-08pp Firmware Sf350-48 Sf350-48 Firmware Sf350-48mp Sf350-48mp Firmware Sf350-48p Sf350-48p Firmware Sf500-24 Sf500-24 Firmware Sf500-24p Sf500-24p Firmware Sf500-48 Sf500-48 Firmware Sf500-48p Sf500-48p Firmware Sf550x-24 Sf550x-24 Firmware Sf550x-24mp Sf550x-24mp Firmware Sf550x-24p Sf550x-24p Firmware Sf550x-48 Sf550x-48 Firmware Sf550x-48mp Sf550x-48mp Firmware Sf550x-48p Sf550x-48p Firmware Sg200-08 Sg200-08 Firmware Sg200-08p Sg200-08p Firmware Sg200-10fp Sg200-10fp Firmware Sg200-18 Sg200-18 Firmware Sg200-26 Sg200-26 Firmware Sg200-26fp Sg200-26fp Firmware Sg200-26p Sg200-26p Firmware Sg200-50 Sg200-50 Firmware Sg200-50fp Sg200-50fp Firmware Sg200-50p Sg200-50p Firmware Sg300-10 Sg300-10 Firmware Sg300-10mp Sg300-10mp Firmware Sg300-10mpp Sg300-10mpp Firmware Sg300-10p Sg300-10p Firmware Sg300-10pp Sg300-10pp Firmware Sg300-10sfp Sg300-10sfp Firmware Sg300-20 Sg300-20 Firmware Sg300-28 Sg300-28 Firmware Sg300-28mp Sg300-28mp Firmware Sg300-28p Sg300-28p Firmware Sg300-28pp Sg300-28pp Firmware Sg300-52 Sg300-52 Firmware Sg300-52mp Sg300-52mp Firmware Sg300-52p Sg300-52p Firmware Sg350-10 Sg350-10 Firmware Sg350-10mp Sg350-10mp Firmware Sg350-10p Sg350-10p Firmware Sg350-28 Sg350-28 Firmware Sg350-28mp Sg350-28mp Firmware Sg350-28p Sg350-28p Firmware Sg355-10p Sg355-10p Firmware Sg500-28 Sg500-28 Firmware Sg500-28mpp Sg500-28mpp Firmware Sg500-28p Sg500-28p Firmware Sg500-52 Sg500-52 Firmware Sg500-52mp Sg500-52mp Firmware Sg500-52p Sg500-52p Firmware Sg500x-24 Sg500x-24 Firmware Sg500x-24p Sg500x-24p Firmware Sg500x-48 Sg500x-48 Firmware Sg500x-48p Sg500x-48p Firmware Sg500xg-8f8t Sg500xg-8f8t Firmware Sg550x-24 Sg550x-24 Firmware Sg550x-24mp Sg550x-24mp Firmware Sg550x-24mpp Sg550x-24mpp Firmware Sg550x-24p Sg550x-24p Firmware Sg550x-48 Sg550x-48 Firmware Sg550x-48mp Sg550x-48mp Firmware Sg550x-48p Sg550x-48p Firmware Sx550x-12f Sx550x-12f Firmware Sx550x-16ft Sx550x-16ft Firmware Sx550x-24 Sx550x-24 Firmware Sx550x-24f Sx550x-24f Firmware Sx550x-24ft Sx550x-24ft Firmware Sx550x-52 Sx550x-52 Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Nov 21, 2024, 7:08 PM
Reserved
Jun 4, 2019, 12:00 AM
Status
Modified
Published
Oct 16, 2019, 7:15 PM
Modified
Jun 17, 2026, 2:15 AM