CVSS 6.1 · Medium EPSS 0,31%
Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada cisco network services orchestrator. Skor CVSS 3.1 6.1 (Medium) menurut NVD.
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| cisco | network services orchestrator | Versi 5.4 hingga sebelum 5.5.10.1 |
| cisco | network services orchestrator | Versi 5.6 hingga sebelum 5.6.14.3 |
| cisco | network services orchestrator | Versi 5.7 hingga sebelum 5.7.15 |
| cisco | network services orchestrator | Versi 5.8 hingga sebelum 5.8.13.1 |
| cisco | network services orchestrator | Versi 6.0 hingga sebelum 6.0.12 |
| cisco | network services orchestrator | Versi 6.1 hingga sebelum 6.1.7 |
| cisco | network services orchestrator | Versi 6.2 hingga sebelum 6.2.2 |