CVE-2018-0465

A vulnerability in the web-based management interface of Cisco Small Business 300 Series Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected system. The vulnerability exists because the affected management interface performs insufficient validation of user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or allow the attacker to access sensitive, browser-based information.

• cisco sf302-08pp firmware 1.4.2.4 • cisco sf302-08mpp firmware 1.4.2.4 • cisco sg300-10pp firmware 1.4.2.4 • cisco sg300-10mpp firmware 1.4.2.4 • cisco sf300-24pp firmware 1.4.2.4 • cisco sf300-48pp firmware 1.4.2.4 • cisco sg300-28pp firmware 1.4.2.4 • cisco sf300-08 firmware 1.4.2.4 • cisco sf300-48p firmware 1.4.2.4 • cisco sg300-10mp firmware 1.4.2.4 • cisco sg300-10p firmware 1.4.2.4 • cisco sg300-10 firmware 1.4.2.4 • cisco sg300-28p firmware 1.4.2.4 • cisco sf300-24p firmware 1.4.2.4 • cisco sf302-08mp firmware 1.4.2.4 • cisco sg300-28 firmware 1.4.2.4 • cisco sf300-48 firmware 1.4.2.4 • cisco sg300-20 firmware 1.4.2.4 • cisco sf302-08p firmware 1.4.2.4 • cisco sg300-52 firmware 1.4.2.4 • cisco sf300-24 firmware 1.4.2.4 • cisco sf302-08 firmware 1.4.2.4 • cisco sf300-24mp firmware 1.4.2.4 • cisco sg300-10sfp firmware 1.4.2.4 • cisco sg300-28mp firmware 1.4.2.4 • cisco sg300-52p firmware 1.4.2.4 • cisco sg300-52mp firmware 1.4.2.4