Description (CNA)
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Network Services Orchestrator | affected 5.4; affected 5.5; affected 5.6; affected 5.7; affected 5.8; affected 5.1.1.1; affected 5.1.1.3; affected 5.1.2; affected 5.2.0.4; affected 5.2.1; affected 5.2.1.1; affected 5.2.3.2; affected 5.3.1; affected 5.3.4.3; affected 5.4.0.1; affected 5.4.1; affected 5.4.1.1; affected 5.4.2; affected 5.4.3.1; affected 5.4.4.1; affected 5.4.4; affected 5.4.4.3; affected 5.4.3.3; affected 5.4.5.1; affected 5.4.5.2; affected 5.4.5; affected 5.4.6; affected 5.4.7; affected 5.4.7.1; affected 5.5.1; affected 5.5.2; affected 5.5.2.1; affected 5.5.2.3; affected 5.5.2.4; affected 5.5.2.9; affected 5.5.2.10; affected 5.5.3; affected 5.5.2.7; affected 5.5.2.12; affected 5.5.4.1; affected 5.5.3.1; affected 5.5.5; affected 5.5.6; affected 5.5.7; affected 5.5.8; affected 5.6.1; affected 5.6.3; affected 5.6.2; affected 5.6.5; affected 5.6.6; affected 5.6.6.1; affected 5.6.7; affected 5.6.7.1; affected 5.6.8; affected 5.6.8.1; affected 5.6.11; affected 5.6.13; affected 5.6.14; affected 5.6.14.1; affected 5.7.1.1; affected 5.7.1; affected 5.7.2; affected 5.7.2.1; affected 5.7.3; affected 5.7.4; affected 5.7.5; affected 5.7.5.1; affected 5.7.6; affected 5.7.6.2; affected 5.7.8; affected 5.7.10; affected 5.7.10.2; affected 5.7.11; affected 5.7.13; affected 5.7.14; affected 5.7.9; affected 5.7.9.1; affected 5.8.1; affected 5.8.2; affected 5.8.2.1; affected 5.8.5; affected 5.8.10; affected 5.8.11; affected 5.8.9; affected 6.1; affected 6.2; affected 6.0.1.1; affected 6.0.10; affected 6.0.5; affected 6.0.8; affected 6.1.2.1; affected 6.1.5; affected 6.1.6 |
CWE
CWE-601
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.