{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20088", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.367Z", "datePublished": "2026-04-01T16:34:40.845Z", "dateUpdated": "2026-04-01T17:55:20.021Z"}, "containers": {"cna": {"title": "Cisco Integrated Management Controller Cross-Site Scripting Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "baseScore": 4.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface.\r\n\r\nThis vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-A2tkgVAB", "name": "cisco-sa-cimc-xss-A2tkgVAB"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-cimc-xss-A2tkgVAB", "discovery": "EXTERNAL", "defects": ["CSCwr60943"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "type": "cwe", "cweId": "CWE-79"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Enterprise NFV Infrastructure Software", "versions": [{"version": "4.1.1", "status": "affected"}, {"version": "3.9.1", "status": "affected"}, {"version": "3.5.2", "status": "affected"}, {"version": "3.12.2", "status": "affected"}, {"version": "3.6.2", "status": "affected"}, {"version": "3.9.2", "status": "affected"}, {"version": "3.11.3", "status": "affected"}, {"version": "3.11.1", "status": "affected"}, {"version": "3.5.1", "status": "affected"}, {"version": "3.3.1", "status": "affected"}, {"version": "3.10.2", "status": "affected"}, {"version": "3.12.1b", "status": "affected"}, {"version": "3.4.1", "status": "affected"}, {"version": "3.12.1a", "status": "affected"}, {"version": "3.6.3", "status": "affected"}, {"version": "3.8.1", "status": "affected"}, {"version": "3.11.2", "status": "affected"}, {"version": "3.12.1", "status": "affected"}, {"version": "3.12.3", "status": "affected"}, {"version": "3.10.1", "status": "affected"}, {"version": "3.6.1", "status": "affected"}, {"version": "3.10.3", "status": "affected"}, {"version": "3.7.1", "status": "affected"}, {"version": "4.1.2", "status": "affected"}, {"version": "4.2.1", "status": "affected"}, {"version": "4.2.2", "status": "affected"}, {"version": "4.4.1", "status": "affected"}, {"version": "4.4.2", "status": "affected"}, {"version": "4.5.1", "status": "affected"}, {"version": "4.4.3", "status": "affected"}, {"version": "4.6.1", "status": "affected"}, {"version": "4.7.1", "status": "affected"}, {"version": "4.6.2-FC2", "status": "affected"}, {"version": "4.6.2-FC3", "status": "affected"}, {"version": "4.6.2", "status": "affected"}, {"version": "4.8.1", "status": "affected"}, {"version": "4.8.2", "status": "affected"}, {"version": "4.9.1", "status": "affected"}, {"version": "4.6.3", "status": "affected"}, {"version": "4.9.2-FC5", "status": "affected"}, {"version": "4.9.2", "status": "affected"}, {"version": "4.10.1", "status": "affected"}, {"version": "4.9.3", "status": "affected"}, {"version": "4.11.1", "status": "affected"}, {"version": "4.9.4", "status": "affected"}, {"version": "4.12.1", "status": "affected"}, {"version": "4.6.4", "status": "affected"}, {"version": "4.12.2", "status": "affected"}, {"version": "4.13.1", "status": "affected"}, {"version": "4.9.4-ES8", "status": "affected"}, {"version": "4.9.5", "status": "affected"}, {"version": "4.12.3", "status": "affected"}, {"version": "4.6.5-ES1", "status": "affected"}, {"version": "4.9.4-ES9", "status": "affected"}, {"version": "4.14.1", "status": "affected"}, {"version": "4.6.3-FC4", "status": "affected"}, {"version": "4.9.4-FC3", "status": "affected"}, {"version": "4.12.4", "status": "affected"}, {"version": "4.15.1", "status": "affected"}, {"version": "4.9.6", "status": "affected"}, {"version": "4.16.1", "status": "affected"}, {"version": "4.15.2", "status": "affected"}, {"version": "4.12.5", "status": "affected"}, {"version": "4.15.3", "status": "affected"}, {"version": "4.15.4", "status": "affected"}, {"version": "4.18.1", "status": "affected"}, {"version": "4.12.6", "status": "affected"}, {"version": "4.18.2", "status": "affected"}, {"version": "4.18.2a", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Unified Computing System (Standalone)", "versions": [{"version": "4.0(2g)", "status": "affected"}, {"version": "3.1(2i)", "status": "affected"}, {"version": "3.1(1d)", "status": "affected"}, {"version": "4.0(4i)", "status": "affected"}, {"version": "4.1(1c)", "status": "affected"}, {"version": "4.0(2c)", "status": "affected"}, {"version": "4.0(1e)", "status": "affected"}, {"version": "4.0(2h)", "status": "affected"}, {"version": "4.0(4h)", "status": "affected"}, {"version": "4.0(1h)", "status": "affected"}, {"version": "4.0(2l)", "status": "affected"}, {"version": "3.1(3g)", "status": "affected"}, {"version": "4.0(1.240)", "status": "affected"}, {"version": "4.0(2f)", "status": "affected"}, {"version": "4.0(1g)", "status": "affected"}, {"version": "4.0(2i)", "status": "affected"}, {"version": "3.1(3i)", "status": "affected"}, {"version": "4.0(4d)", "status": "affected"}, {"version": "4.1(1d)", "status": "affected"}, {"version": "3.1(3c)", "status": "affected"}, {"version": "4.0(4k)", "status": "affected"}, {"version": "3.1(2d)", "status": "affected"}, {"version": "3.1(3a)", "status": "affected"}, {"version": "3.1(3j)", "status": "affected"}, {"version": "4.0(2d)", "status": "affected"}, {"version": "4.1(1f)", "status": "affected"}, {"version": "4.0(1c)", "status": "affected"}, {"version": "4.0(4f)", "status": "affected"}, {"version": "4.0(4c)", "status": "affected"}, {"version": "3.1(3d)", "status": "affected"}, {"version": "3.1(2g)", "status": "affected"}, {"version": "3.1(2c)", "status": "affected"}, {"version": "4.0(1d)", "status": "affected"}, {"version": "3.1(2e)", "status": "affected"}, {"version": "4.0(1a)", "status": "affected"}, {"version": "4.0(1b)", "status": "affected"}, {"version": "3.1(3b)", "status": "affected"}, {"version": "4.0(4b)", "status": "affected"}, {"version": "3.1(2b)", "status": "affected"}, {"version": "4.0(4e)", "status": "affected"}, {"version": "3.1(3h)", "status": "affected"}, {"version": "4.0(4l)", "status": "affected"}, {"version": "4.1(1g)", "status": "affected"}, {"version": "4.1(2a)", "status": "affected"}, {"version": "4.0(2n)", "status": "affected"}, {"version": "4.1(1h)", "status": "affected"}, {"version": "3.1(3k)", "status": "affected"}, {"version": "4.1(2b)", "status": "affected"}, {"version": "4.0(2o)", "status": "affected"}, {"version": "4.0(4m)", "status": "affected"}, {"version": "4.1(2d)", "status": "affected"}, {"version": "4.1(3b)", "status": "affected"}, {"version": "4.0(2p)", "status": "affected"}, {"version": "4.1(2e)", "status": "affected"}, {"version": "4.1(2f)", "status": "affected"}, {"version": "4.0(4n)", "status": "affected"}, {"version": "4.0(2q)", "status": "affected"}, {"version": "4.1(3c)", "status": "affected"}, {"version": "4.0(2r)", "status": "affected"}, {"version": "4.1(3d)", "status": "affected"}, {"version": "4.1(2g)", "status": "affected"}, {"version": "4.1(2h)", "status": "affected"}, {"version": "4.1(3f)", "status": "affected"}, {"version": "4.1(2j)", "status": "affected"}, {"version": "4.1(2k)", "status": "affected"}, {"version": "4.1(3h)", "status": "affected"}, {"version": "4.2(2a)", "status": "affected"}, {"version": "4.1(3i)", "status": "affected"}, {"version": "4.2(2f)", "status": "affected"}, {"version": "4.2(2g)", "status": "affected"}, {"version": "4.2(3b)", "status": "affected"}, {"version": "4.1(3l)", "status": "affected"}, {"version": "4.2(3d)", "status": "affected"}, {"version": "4.3(1.230097)", "status": "affected"}, {"version": "4.2(1e)", "status": "affected"}, {"version": "4.2(1b)", "status": "affected"}, {"version": "4.2(1j)", "status": "affected"}, {"version": "4.2(1i)", "status": "affected"}, {"version": "4.2(1f)", "status": "affected"}, {"version": "4.2(1a)", "status": "affected"}, {"version": "4.2(1c)", "status": "affected"}, {"version": "4.2(1g)", "status": "affected"}, {"version": "4.3(1.230124)", "status": "affected"}, {"version": "4.1(2l)", "status": "affected"}, {"version": "4.2(3e)", "status": "affected"}, {"version": "4.3(1.230138)", "status": "affected"}, {"version": "4.2(3g)", "status": "affected"}, {"version": "4.3(2.230207)", "status": "affected"}, {"version": "4.2(3h)", "status": "affected"}, {"version": "4.2(3i)", "status": "affected"}, {"version": "4.3(2.230270)", "status": "affected"}, {"version": "4.1(3m)", "status": "affected"}, {"version": "4.1(2m)", "status": "affected"}, {"version": "4.3(2.240002)", "status": "affected"}, {"version": "4.3(3.240022)", "status": "affected"}, {"version": "4.2(3j)", "status": "affected"}, {"version": "4.1(3n)", "status": "affected"}, {"version": "4.3(2.240009)", "status": "affected"}, {"version": "4.3(3.240043)", "status": "affected"}, {"version": "4.3(4.240142)", "status": "affected"}, {"version": "4.3(2.240037)", "status": "affected"}, {"version": "4.3(2.240053)", "status": "affected"}, {"version": "4.3(4.240152)", "status": "affected"}, {"version": "4.2(3l)", "status": "affected"}, {"version": "4.3(2.240077)", "status": "affected"}, {"version": "4.3(4.242028)", "status": "affected"}, {"version": "4.3(4.241063)", "status": "affected"}, {"version": "4.3(4.242038)", "status": "affected"}, {"version": "4.2(3m)", "status": "affected"}, {"version": "4.3(2.240090)", "status": "affected"}, {"version": "4.3(5.240021)", "status": "affected"}, {"version": "4.3(2.240107)", "status": "affected"}, {"version": "4.3(4.242066)", "status": "affected"}, {"version": "4.2(3n)", "status": "affected"}, {"version": "4.3(5.250001)", "status": "affected"}, {"version": "4.2(3o)", "status": "affected"}, {"version": "4.3(2.250016)", "status": "affected"}, {"version": "4.3(2.250021)", "status": "affected"}, {"version": "4.3(5.250030)", "status": "affected"}, {"version": "4.3(2.250022)", "status": "affected"}, {"version": "4.3(6.250040)", "status": "affected"}, {"version": "4.3(5.250033)", "status": "affected"}, {"version": "4.3(6.250044)", "status": "affected"}, {"version": "4.3(6.250053)", "status": "affected"}, {"version": "4.3(2.250037)", "status": "affected"}, {"version": "4.3(2.250045)", "status": "affected"}, {"version": "4.3(4.252001)", "status": "affected"}, {"version": "4.3(4.252002)", "status": "affected"}, {"version": "6.0(1.250127)", "status": "affected"}, {"version": "4.2(3p)", "status": "affected"}, {"version": "6.0(1.250131)", "status": "affected"}, {"version": "4.3(6.250101)", "status": "affected"}, {"version": "6.0(1.250174)", "status": "affected"}, {"version": "4.3(6.250117)", "status": "affected"}, {"version": "4.3(5.250043)", "status": "affected"}, {"version": "4.3(6.250039)", "status": "affected"}, {"version": "4.3(5.250045)", "status": "affected"}, {"version": "4.3(6.250060)", "status": "affected"}, {"version": "6.0(1.250130)", "status": "affected"}, {"version": "4.3(4.241014)", "status": "affected"}, {"version": "4.3(2.250063)", "status": "affected"}, {"version": "6.0(1.250192)", "status": "affected"}, {"version": "4.3(6.260003)", "status": "affected"}, {"version": "6.0(1.250194)", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Unified Computing System E-Series Software (UCSE)", "versions": [{"version": "3.2.7", "status": "affected"}, {"version": "3.2.6", "status": "affected"}, {"version": "3.2.4", "status": "affected"}, {"version": "3.2.10", "status": "affected"}, {"version": "3.2.2", "status": "affected"}, {"version": "3.2.3", "status": "affected"}, {"version": "2.4.0", "status": "affected"}, {"version": "3.2.1", "status": "affected"}, {"version": "3.2.11.1", "status": "affected"}, {"version": "3.2.8", "status": "affected"}, {"version": "3.1.1", "status": "affected"}, {"version": "3.0.2", "status": "affected"}, {"version": "2.1.0", "status": "affected"}, {"version": "2.2.2", "status": "affected"}, {"version": "3.1.2", "status": "affected"}, {"version": "3.0.1", "status": "affected"}, {"version": "2.3.2", "status": "affected"}, {"version": "2.3.5", "status": "affected"}, {"version": "2.2.1", "status": "affected"}, {"version": "3.1.4", "status": "affected"}, {"version": "2.4.1", "status": "affected"}, {"version": "2.3.1", "status": "affected"}, {"version": "3.1.3", "status": "affected"}, {"version": "2.3.3", "status": "affected"}, {"version": "2.4.2", "status": "affected"}, {"version": "3.1.5", "status": "affected"}, {"version": "3.1.0", "status": "affected"}, {"version": "2.0.0", "status": "affected"}, {"version": "3.2.11.3", "status": "affected"}, {"version": "3.2.11.5", "status": "affected"}, {"version": "3.2.12.2", "status": "affected"}, {"version": "3.2.13.6", "status": "affected"}, {"version": "3.2.14", "status": "affected"}, {"version": "3.2.15", "status": "affected"}, {"version": "3.2.15.3", "status": "affected"}, {"version": "3.2.16.1", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-04-01T16:34:40.845Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-01T17:55:03.494571Z", "id": "CVE-2026-20088", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T17:55:20.021Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20088", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-01T17:55:03.494571Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T17:55:15.299Z"}}], "cna": {"title": "Cisco Integrated Management Controller Cross-Site Scripting Vulnerability", "source": {"defects": ["CSCwr60943"], "advisory": "cisco-sa-cimc-xss-A2tkgVAB", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Enterprise NFV Infrastructure Software", "versions": [{"status": "affected", "version": "4.1.1"}, {"status": "affected", "version": "3.9.1"}, {"status": "affected", "version": "3.5.2"}, {"status": "affected", "version": "3.12.2"}, {"status": "affected", "version": "3.6.2"}, {"status": "affected", "version": "3.9.2"}, {"status": "affected", "version": "3.11.3"}, {"status": "affected", "version": "3.11.1"}, {"status": "affected", "version": "3.5.1"}, {"status": "affected", "version": "3.3.1"}, {"status": "affected", "version": "3.10.2"}, {"status": "affected", "version": "3.12.1b"}, {"status": "affected", "version": "3.4.1"}, {"status": "affected", "version": "3.12.1a"}, {"status": "affected", "version": "3.6.3"}, {"status": "affected", "version": "3.8.1"}, {"status": "affected", "version": "3.11.2"}, {"status": "affected", "version": "3.12.1"}, {"status": "affected", "version": "3.12.3"}, {"status": "affected", "version": "3.10.1"}, {"status": "affected", "version": "3.6.1"}, {"status": "affected", "version": "3.10.3"}, {"status": "affected", "version": "3.7.1"}, {"status": "affected", "version": "4.1.2"}, {"status": "affected", "version": "4.2.1"}, {"status": "affected", "version": "4.2.2"}, {"status": "affected", "version": "4.4.1"}, {"status": "affected", "version": "4.4.2"}, {"status": "affected", "version": "4.5.1"}, {"status": "affected", "version": "4.4.3"}, {"status": "affected", "version": "4.6.1"}, {"status": "affected", "version": "4.7.1"}, {"status": "affected", "version": "4.6.2-FC2"}, {"status": "affected", "version": "4.6.2-FC3"}, {"status": "affected", "version": "4.6.2"}, {"status": "affected", "version": "4.8.1"}, {"status": "affected", "version": "4.8.2"}, {"status": "affected", "version": "4.9.1"}, {"status": "affected", "version": "4.6.3"}, {"status": "affected", "version": "4.9.2-FC5"}, {"status": "affected", "version": "4.9.2"}, {"status": "affected", "version": "4.10.1"}, {"status": "affected", "version": "4.9.3"}, {"status": "affected", "version": "4.11.1"}, {"status": "affected", "version": "4.9.4"}, {"status": "affected", "version": "4.12.1"}, {"status": "affected", "version": "4.6.4"}, {"status": "affected", "version": "4.12.2"}, {"status": "affected", "version": "4.13.1"}, {"status": "affected", "version": "4.9.4-ES8"}, {"status": "affected", "version": "4.9.5"}, {"status": "affected", "version": "4.12.3"}, {"status": "affected", "version": "4.6.5-ES1"}, {"status": "affected", "version": "4.9.4-ES9"}, {"status": "affected", "version": "4.14.1"}, {"status": "affected", "version": "4.6.3-FC4"}, {"status": "affected", "version": "4.9.4-FC3"}, {"status": "affected", "version": "4.12.4"}, {"status": "affected", "version": "4.15.1"}, {"status": "affected", "version": "4.9.6"}, {"status": "affected", "version": "4.16.1"}, {"status": "affected", "version": "4.15.2"}, {"status": "affected", "version": "4.12.5"}, {"status": "affected", "version": "4.15.3"}, {"status": "affected", "version": "4.15.4"}, {"status": "affected", "version": "4.18.1"}, {"status": "affected", "version": "4.12.6"}, {"status": "affected", "version": "4.18.2"}, {"status": "affected", "version": "4.18.2a"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Unified Computing System (Standalone)", "versions": [{"status": "affected", "version": "4.0(2g)"}, {"status": "affected", "version": "3.1(2i)"}, {"status": "affected", "version": "3.1(1d)"}, {"status": "affected", "version": "4.0(4i)"}, {"status": "affected", "version": "4.1(1c)"}, {"status": "affected", "version": "4.0(2c)"}, {"status": "affected", "version": "4.0(1e)"}, {"status": "affected", "version": "4.0(2h)"}, {"status": "affected", "version": "4.0(4h)"}, {"status": "affected", "version": "4.0(1h)"}, {"status": "affected", "version": "4.0(2l)"}, {"status": "affected", "version": "3.1(3g)"}, {"status": "affected", "version": "4.0(1.240)"}, {"status": "affected", "version": "4.0(2f)"}, {"status": "affected", "version": "4.0(1g)"}, {"status": "affected", "version": "4.0(2i)"}, {"status": "affected", "version": "3.1(3i)"}, {"status": "affected", "version": "4.0(4d)"}, {"status": "affected", "version": "4.1(1d)"}, {"status": "affected", "version": "3.1(3c)"}, {"status": "affected", "version": "4.0(4k)"}, {"status": "affected", "version": "3.1(2d)"}, {"status": "affected", "version": "3.1(3a)"}, {"status": "affected", "version": "3.1(3j)"}, {"status": "affected", "version": "4.0(2d)"}, {"status": "affected", "version": "4.1(1f)"}, {"status": "affected", "version": "4.0(1c)"}, {"status": "affected", "version": "4.0(4f)"}, {"status": "affected", "version": "4.0(4c)"}, {"status": "affected", "version": "3.1(3d)"}, {"status": "affected", "version": "3.1(2g)"}, {"status": "affected", "version": "3.1(2c)"}, {"status": "affected", "version": "4.0(1d)"}, {"status": "affected", "version": "3.1(2e)"}, {"status": "affected", "version": "4.0(1a)"}, {"status": "affected", "version": "4.0(1b)"}, {"status": "affected", "version": "3.1(3b)"}, {"status": "affected", "version": "4.0(4b)"}, {"status": "affected", "version": "3.1(2b)"}, {"status": "affected", "version": "4.0(4e)"}, {"status": "affected", "version": "3.1(3h)"}, {"status": "affected", "version": "4.0(4l)"}, {"status": "affected", "version": "4.1(1g)"}, {"status": "affected", "version": "4.1(2a)"}, {"status": "affected", "version": "4.0(2n)"}, {"status": "affected", "version": "4.1(1h)"}, {"status": "affected", "version": "3.1(3k)"}, {"status": "affected", "version": "4.1(2b)"}, {"status": "affected", "version": "4.0(2o)"}, {"status": "affected", "version": "4.0(4m)"}, {"status": "affected", "version": "4.1(2d)"}, {"status": "affected", "version": "4.1(3b)"}, {"status": "affected", "version": "4.0(2p)"}, {"status": "affected", "version": "4.1(2e)"}, {"status": "affected", "version": "4.1(2f)"}, {"status": "affected", "version": "4.0(4n)"}, {"status": "affected", "version": "4.0(2q)"}, {"status": "affected", "version": "4.1(3c)"}, {"status": "affected", "version": "4.0(2r)"}, {"status": "affected", "version": "4.1(3d)"}, {"status": "affected", "version": "4.1(2g)"}, {"status": "affected", "version": "4.1(2h)"}, {"status": "affected", "version": "4.1(3f)"}, {"status": "affected", "version": "4.1(2j)"}, {"status": "affected", "version": "4.1(2k)"}, {"status": "affected", "version": "4.1(3h)"}, {"status": "affected", "version": "4.2(2a)"}, {"status": "affected", "version": "4.1(3i)"}, {"status": "affected", "version": "4.2(2f)"}, {"status": "affected", "version": "4.2(2g)"}, {"status": "affected", "version": "4.2(3b)"}, {"status": "affected", "version": "4.1(3l)"}, {"status": "affected", "version": "4.2(3d)"}, {"status": "affected", "version": "4.3(1.230097)"}, {"status": "affected", "version": "4.2(1e)"}, {"status": "affected", "version": "4.2(1b)"}, {"status": "affected", "version": "4.2(1j)"}, {"status": "affected", "version": "4.2(1i)"}, {"status": "affected", "version": "4.2(1f)"}, {"status": "affected", "version": "4.2(1a)"}, {"status": "affected", "version": "4.2(1c)"}, {"status": "affected", "version": "4.2(1g)"}, {"status": "affected", "version": "4.3(1.230124)"}, {"status": "affected", "version": "4.1(2l)"}, {"status": "affected", "version": "4.2(3e)"}, {"status": "affected", "version": "4.3(1.230138)"}, {"status": "affected", "version": "4.2(3g)"}, {"status": "affected", "version": "4.3(2.230207)"}, {"status": "affected", "version": "4.2(3h)"}, {"status": "affected", "version": "4.2(3i)"}, {"status": "affected", "version": "4.3(2.230270)"}, {"status": "affected", "version": "4.1(3m)"}, {"status": "affected", "version": "4.1(2m)"}, {"status": "affected", "version": "4.3(2.240002)"}, {"status": "affected", "version": "4.3(3.240022)"}, {"status": "affected", "version": "4.2(3j)"}, {"status": "affected", "version": "4.1(3n)"}, {"status": "affected", "version": "4.3(2.240009)"}, {"status": "affected", "version": "4.3(3.240043)"}, {"status": "affected", "version": "4.3(4.240142)"}, {"status": "affected", "version": "4.3(2.240037)"}, {"status": "affected", "version": "4.3(2.240053)"}, {"status": "affected", "version": "4.3(4.240152)"}, {"status": "affected", "version": "4.2(3l)"}, {"status": "affected", "version": "4.3(2.240077)"}, {"status": "affected", "version": "4.3(4.242028)"}, {"status": "affected", "version": "4.3(4.241063)"}, {"status": "affected", "version": "4.3(4.242038)"}, {"status": "affected", "version": "4.2(3m)"}, {"status": "affected", "version": "4.3(2.240090)"}, {"status": "affected", "version": "4.3(5.240021)"}, {"status": "affected", "version": "4.3(2.240107)"}, {"status": "affected", "version": "4.3(4.242066)"}, {"status": "affected", "version": "4.2(3n)"}, {"status": "affected", "version": "4.3(5.250001)"}, {"status": "affected", "version": "4.2(3o)"}, {"status": "affected", "version": "4.3(2.250016)"}, {"status": "affected", "version": "4.3(2.250021)"}, {"status": "affected", "version": "4.3(5.250030)"}, {"status": "affected", "version": "4.3(2.250022)"}, {"status": "affected", "version": "4.3(6.250040)"}, {"status": "affected", "version": "4.3(5.250033)"}, {"status": "affected", "version": "4.3(6.250044)"}, {"status": "affected", "version": "4.3(6.250053)"}, {"status": "affected", "version": "4.3(2.250037)"}, {"status": "affected", "version": "4.3(2.250045)"}, {"status": "affected", "version": "4.3(4.252001)"}, {"status": "affected", "version": "4.3(4.252002)"}, {"status": "affected", "version": "6.0(1.250127)"}, {"status": "affected", "version": "4.2(3p)"}, {"status": "affected", "version": "6.0(1.250131)"}, {"status": "affected", "version": "4.3(6.250101)"}, {"status": "affected", "version": "6.0(1.250174)"}, {"status": "affected", "version": "4.3(6.250117)"}, {"status": "affected", "version": "4.3(5.250043)"}, {"status": "affected", "version": "4.3(6.250039)"}, {"status": "affected", "version": "4.3(5.250045)"}, {"status": "affected", "version": "4.3(6.250060)"}, {"status": "affected", "version": "6.0(1.250130)"}, {"status": "affected", "version": "4.3(4.241014)"}, {"status": "affected", "version": "4.3(2.250063)"}, {"status": "affected", "version": "6.0(1.250192)"}, {"status": "affected", "version": "4.3(6.260003)"}, {"status": "affected", "version": "6.0(1.250194)"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Unified Computing System E-Series Software (UCSE)", "versions": [{"status": "affected", "version": "3.2.7"}, {"status": "affected", "version": "3.2.6"}, {"status": "affected", "version": "3.2.4"}, {"status": "affected", "version": "3.2.10"}, {"status": "affected", "version": "3.2.2"}, {"status": "affected", "version": "3.2.3"}, {"status": "affected", "version": "2.4.0"}, {"status": "affected", "version": "3.2.1"}, {"status": "affected", "version": "3.2.11.1"}, {"status": "affected", "version": "3.2.8"}, {"status": "affected", "version": "3.1.1"}, {"status": "affected", "version": "3.0.2"}, {"status": "affected", "version": "2.1.0"}, {"status": "affected", "version": "2.2.2"}, {"status": "affected", "version": "3.1.2"}, {"status": "affected", "version": "3.0.1"}, {"status": "affected", "version": "2.3.2"}, {"status": "affected", "version": "2.3.5"}, {"status": "affected", "version": "2.2.1"}, {"status": "affected", "version": "3.1.4"}, {"status": "affected", "version": "2.4.1"}, {"status": "affected", "version": "2.3.1"}, {"status": "affected", "version": "3.1.3"}, {"status": "affected", "version": "2.3.3"}, {"status": "affected", "version": "2.4.2"}, {"status": "affected", "version": "3.1.5"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "2.0.0"}, {"status": "affected", "version": "3.2.11.3"}, {"status": "affected", "version": "3.2.11.5"}, {"status": "affected", "version": "3.2.12.2"}, {"status": "affected", "version": "3.2.13.6"}, {"status": "affected", "version": "3.2.14"}, {"status": "affected", "version": "3.2.15"}, {"status": "affected", "version": "3.2.15.3"}, {"status": "affected", "version": "3.2.16.1"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-A2tkgVAB", "name": "cisco-sa-cimc-xss-A2tkgVAB"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface.\r\n\r\nThis vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-79", "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-04-01T16:34:40.845Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20088", "state": "PUBLISHED", "dateUpdated": "2026-04-01T17:55:20.021Z", "dateReserved": "2025-10-08T11:59:15.367Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-04-01T16:34:40.845Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface.\r\n\r\nThis vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information."}], "id": "CVE-2026-20088", "lastModified": "2026-04-03T16:11:11.357", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 2.7, "source": "psirt@cisco.com", "type": "Primary"}]}, "published": "2026-04-01T17:28:27.457", "references": [{"source": "psirt@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-A2tkgVAB"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@cisco.com", "type": "Primary"}]}

{}