CVE-2021-1374

A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by authenticating to the device as a high-privileged user, adding certain configurations with malicious code in one of its fields, and persuading another user to click on it. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or to access sensitive, browser-based information.

• cisco ios xe 16.6.1 • cisco ios xe 16.6.2 • cisco ios xe 16.6.3 • cisco ios xe 16.6.4 • cisco ios xe 16.6.4a • cisco ios xe 16.6.4s • cisco ios xe 16.6.5 • cisco ios xe 16.6.5a • cisco ios xe 16.6.5b • cisco ios xe 16.6.6 • cisco ios xe 16.6.7 • cisco ios xe 16.6.7a • cisco ios xe 16.6.8 • cisco ios xe 16.7.1 • cisco ios xe 16.7.1a • cisco ios xe 16.7.1b • cisco ios xe 16.7.2 • cisco ios xe 16.7.3 • cisco ios xe 16.7.4 • cisco ios xe 16.8.1 • cisco ios xe 16.8.1a • cisco ios xe 16.8.1b • cisco ios xe 16.8.1c • cisco ios xe 16.8.1d • cisco ios xe 16.8.1e • cisco ios xe 16.8.1s • cisco ios xe 16.8.2 • cisco ios xe 16.8.3 • cisco ios xe 16.9.1 • cisco ios xe 16.9.1a • cisco ios xe 16.9.1b • cisco ios xe 16.9.1c • cisco ios xe 16.9.1d • cisco ios xe 16.9.1s • cisco ios xe 16.9.2 • cisco ios xe 16.9.2a • cisco ios xe 16.9.2s • cisco ios xe 16.9.3 • cisco ios xe 16.9.3a • cisco ios xe 16.9.3h • cisco ios xe 16.9.3s • cisco ios xe 16.9.4 • cisco ios xe 16.9.4c • cisco ios xe 16.9.5 • cisco ios xe 16.9.5f • cisco ios xe 16.10.1 • cisco ios xe 16.10.1a • cisco ios xe 16.10.1b • cisco ios xe 16.10.1c • cisco ios xe 16.10.1d • cisco ios xe 16.10.1e • cisco ios xe 16.10.1f • cisco ios xe 16.10.1g • cisco ios xe 16.10.1s • cisco ios xe 16.10.2 • cisco ios xe 16.10.3 • cisco ios xe 16.11.1 • cisco ios xe 16.11.1a • cisco ios xe 16.11.1b • cisco ios xe 16.11.1c … and 29 more