| Package | Affected versions | Patched versions |
|---|---|---|
| network services orchestrator | ≥ 5.4, < 5.5.10.1≥ 5.6, < 5.6.14.3≥ 5.7, < 5.7.15≥ 5.8, < 5.8.13.1≥ 6.0, < 6.0.12≥ 6.1, < 6.1.7≥ 6.2, < 6.2.2 | 5.5.10.15.6.14.35.7.155.8.13.16.0.126.1.76.2.2 |
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free