CVE-2026-20111 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site…
Medium CVSS: 4.8

CVE-2026-20111

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an affected system.

This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious code into specific data fields in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, an attacker must have valid administrative credentials.
Vendor
Cisco
Product
Prime Infrastructure
CWE
CWE-798
Yayın Tarihi
2026-02-04 17:16:14
Güncelleme
2026-03-10 20:14:37
Source Identifier
psirt@cisco.com
KEV Date Added
-

Kategoriler

Referanslar