Description
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.
Metrics
CVSS 3.1 6.1/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Network Services Orchestrator | 5.4; 5.5; 5.6; 5.7; 5.8; 5.1.1.1; 5.1.1.3; 5.1.2; 5.2.0.4; 5.2.1; 5.2.1.1; 5.2.3.2; 5.3.1; 5.3.4.3; 5.4.0.1; 5.4.1; 5.4.1.1; 5.4.2; 5.4.3.1; 5.4.4.1 |
References
Timeline
- Published
- May 15, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed