Cisco NX-OS Software NX-API Sandbox Cross-Site Scripting Vulnerability
A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the NX-API Sandbox interface. An attacker could exploit this vulnerability by persuading a user of the NX-API Sandbox interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected NX-API Sandbox interface. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-1733US | medium5.4 | — | ||
A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack again… | ||||
references
External citations — patches, advisories, analysis.
- Cisco Nexus 1000V for VMware Switchexternal
- Cisco Nexus 3000 Series and 3500 Series Switchesexternal
- Cisco Nexus 5000 Series Switchesexternal
- Cisco Nexus 5500 Platform Switchesexternal
- Cisco Nexus 6000 Series Switchesexternal
- Cisco Nexus 9000 Series Switchesexternal
- Cisco Nexus 7000 Series Switchesexternal
- CSCvj14814external
remediations (42)
- Fixed7.0(0)N1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(1)N1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(1)N1(3)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(2)I2(2c)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(2)N1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(2)N1(1a)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)F1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)F2(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)F2(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)F3(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)F3(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)F3(3)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)F3(3a)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)F3(3b)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)F3(3c)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)F3(4)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)F3(5)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I1(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I1(1a)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I1(1b)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I1(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I1(3)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I1(3a)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I1(3b)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I2(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I2(1a)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I2(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I2(2a)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I2(2b)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I2(2c)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I2(2d)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I2(2e)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I2(3)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I2(4)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I2(5)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I3(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I4(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I4(2)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I4(3)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I4(4)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed7.0(3)I4(8)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan