VDB
CVE-2024-20369
CVE-2024-20369
PUBLISHED
CVSS 4.699999809265137 MEDIUM
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.
EPSS 0.31% · 22.0th percentile
Risk Scores
CVSS 3.1
4.699999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
EPSS Score
0.31%
22.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Network Services Orchestrator | 6.1.6, 5.7.4, 5.7.5 |
| cisco | network_services_orchestrator | 5.6, 5.7, 5.8 |
Timeline
- May 15, 2024 CVE Published
- May 16, 2024 EPSS Score
- Jun 10, 2024 EPSS Score
- Jul 5, 2024 EPSS Score
- Jul 29, 2024 EPSS Score
- Aug 1, 2024 CVE Updated
- Aug 22, 2024 EPSS Score
- Sep 16, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 10, 2024 EPSS Score
- Oct 16, 2024 Coalition ESS Score
- Nov 3, 2024 EPSS Score