Product:
Cisco Prime Infrastructure
Summary
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious code into specific data fields in the interface.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.8 | CVE-2026-20111 |
Exploitation
To exploit this vulnerability, an attacker must have valid administrative credentials. The attacker can insert malicious code into specific data fields within the web-based management interface. Once the code is executed, it could allow the attacker to run arbitrary script code in the context of the affected interface or access sensitive browser-based information.
Affected Products
- Cisco Prime Infrastructure: Vulnerable due to improper validation of user input in the web-based management interface.
Mitigation
To mitigate this vulnerability, it is recommended that users ensure proper validation of all user-supplied input in the web-based management interface. Additionally, restricting access to the management interface to trusted users and regularly updating the system can help reduce the risk of exploitation.