CVE-2019-1882

Medium

Description

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests containing malicious values to the affected system. A successful exploit could allow the attacker to conduct XSS attacks.

SeverityMedium
CVSS5.4
Exploit probability—
ProductCisco Industrial Network Director
PublishedJun 5, 2019
First seenJun 5, 2019

How to fix

Affected products

ProductAffected versionsFixed in
cisco industrial_network_director1.5\(0.250\)—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.