4.8

CVE-2026-20088: cisco cisco enterprise nfv infrastructure software Cross-site Scripting

CVSS: 4.8v3.1MediumAnalyzed
Published 01-04-2026Last modified 22-04-2026
Open JSON

Vulnerability summary

CVE-2026-20088 is a medium (CVSS 4.8) Cross-site Scripting vulnerability in cisco cisco enterprise nfv infrastructure software. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 12% of scored vulnerabilities.

Overall risk
19/100
0100
Low · default modelHow is this calculated?
CVSS score
4.8/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.22%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 01-04-2026
    PublishedVulnerability first disclosed.
  2. 22-04-2026
    Last modifiedVulnerability information updated.

Description

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

0.00 pp

From 0.22% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco6 products
  • cisco enterprise nfv infrastructure software4.1.1 | 3.9.1 | 3.5.2 | 3.12.2 | 3.6.2 | 3.9.2 | 3.11.3 | 3.11.1 | 3.5.1 | 3.3.1 | 3.10.2 | 3.12.1b | 3.4.1 | 3.12.1a | 3.6.3 | 3.8.1 | 3.11.2 | 3.12.1 | 3.12.3 | 3.10.1 | 3.6.1 | 3.10.3 | 3.7.1 | 4.1.2 | 4.2.1 | 4.2.2 | 4.4.1 | 4.4.2 | 4.5.1 | 4.4.3 | 4.6.1 | 4.7.1 | 4.6.2-FC2 | 4.6.2-FC3 | 4.6.2 | 4.8.1 | 4.8.2 | 4.9.1 | 4.6.3 | 4.9.2-FC5 | 4.9.2 | 4.10.1 | 4.9.3 | 4.11.1 | 4.9.4 | 4.12.1 | 4.6.4 | 4.12.2 | 4.13.1 | 4.9.4-ES8 | 4.9.5 | 4.12.3 | 4.6.5-ES1 | 4.9.4-ES9 | 4.14.1 | 4.6.3-FC4 | 4.9.4-FC3 | 4.12.4 | 4.15.1 | 4.9.6 | 4.16.1 | 4.15.2 | 4.12.5 | 4.15.3 | 4.15.4 | 4.18.1 | 4.12.6 | 4.18.2 | 4.18.2a
  • cisco unified computing system e-series software (ucse)3.2.7 | 3.2.6 | 3.2.4 | 3.2.10 | 3.2.2 | 3.2.3 | 2.4.0 | 3.2.1 | 3.2.11.1 | 3.2.8 | 3.1.1 | 3.0.2 | 2.1.0 | 2.2.2 | 3.1.2 | 3.0.1 | 2.3.2 | 2.3.5 | 2.2.1 | 3.1.4 | 2.4.1 | 2.3.1 | 3.1.3 | 2.3.3 | 2.4.2 | 3.1.5 | 3.1.0 | 2.0.0 | 3.2.11.3 | 3.2.11.5 | 3.2.12.2 | 3.2.13.6 | 3.2.14 | 3.2.15 | 3.2.15.3 | 3.2.16.1
  • cisco unified computing system (standalone)4.0(2g) | 3.1(2i) | 3.1(1d) | 4.0(4i) | 4.1(1c) | 4.0(2c) | 4.0(1e) | 4.0(2h) | 4.0(4h) | 4.0(1h) | 4.0(2l) | 3.1(3g) | 4.0(1.240) | 4.0(2f) | 4.0(1g) | 4.0(2i) | 3.1(3i) | 4.0(4d) | 4.1(1d) | 3.1(3c) | 4.0(4k) | 3.1(2d) | 3.1(3a) | 3.1(3j) | 4.0(2d) | 4.1(1f) | 4.0(1c) | 4.0(4f) | 4.0(4c) | 3.1(3d) | 3.1(2g) | 3.1(2c) | 4.0(1d) | 3.1(2e) | 4.0(1a) | 4.0(1b) | 3.1(3b) | 4.0(4b) | 3.1(2b) | 4.0(4e) | 3.1(3h) | 4.0(4l) | 4.1(1g) | 4.1(2a) | 4.0(2n) | 4.1(1h) | 3.1(3k) | 4.1(2b) | 4.0(2o) | 4.0(4m) | 4.1(2d) | 4.1(3b) | 4.0(2p) | 4.1(2e) | 4.1(2f) | 4.0(4n) | 4.0(2q) | 4.1(3c) | 4.0(2r) | 4.1(3d) | 4.1(2g) | 4.1(2h) | 4.1(3f) | 4.1(2j) | 4.1(2k) | 4.1(3h) | 4.2(2a) | 4.1(3i) | 4.2(2f) | 4.2(2g) | 4.2(3b) | 4.1(3l) | 4.2(3d) | 4.3(1.230097) | 4.2(1e) | 4.2(1b) | 4.2(1j) | 4.2(1i) | 4.2(1f) | 4.2(1a) | 4.2(1c) | 4.2(1g) | 4.3(1.230124) | 4.1(2l) | 4.2(3e) | 4.3(1.230138) | 4.2(3g) | 4.3(2.230207) | 4.2(3h) | 4.2(3i) | 4.3(2.230270) | 4.1(3m) | 4.1(2m) | 4.3(2.240002) | 4.3(3.240022) | 4.2(3j) | 4.1(3n) | 4.3(2.240009) | 4.3(3.240043) | 4.3(4.240142) | 4.3(2.240037) | 4.3(2.240053) | 4.3(4.240152) | 4.2(3l) | 4.3(2.240077) | 4.3(4.242028) | 4.3(4.241063) | 4.3(4.242038) | 4.2(3m) | 4.3(2.240090) | 4.3(5.240021) | 4.3(2.240107) | 4.3(4.242066) | 4.2(3n) | 4.3(5.250001) | 4.2(3o) | 4.3(2.250016) | 4.3(2.250021) | 4.3(5.250030) | 4.3(2.250022) | 4.3(6.250040) | 4.3(5.250033) | 4.3(6.250044) | 4.3(6.250053) | 4.3(2.250037) | 4.3(2.250045) | 4.3(4.252001) | 4.3(4.252002) | 6.0(1.250127) | 4.2(3p) | 6.0(1.250131) | 4.3(6.250101) | 6.0(1.250174) | 4.3(6.250117) | 4.3(5.250043) | 4.3(6.250039) | 4.3(5.250045) | 4.3(6.250060) | 6.0(1.250130) | 4.3(4.241014) | 4.3(2.250063) | 6.0(1.250192) | 4.3(6.260003) | 6.0(1.250194)
  • enterprise_nfv_infrastructure_software3.3.1 | 3.4.1 | 3.5.1 | 3.5.2 | 3.6.1 | 3.6.2 | 3.6.3 | 3.7.1 | 3.8.1 | 3.9.1 | 3.9.2 | 3.10.1 | 3.10.2 | 3.10.3 | 3.11.1 | 3.11.2 | 3.11.3 | 3.12.1 | 3.12.1a | 3.12.1b | 3.12.2 | 3.12.3 | 4.1.1 | 4.1.2 | 4.2.1 | 4.2.2 | 4.4.1 | 4.4.2 | 4.4.3 | 4.5.1 | 4.6.1 | 4.6.2 | 4.6.2-fc2 | 4.6.2-fc3 | 4.6.3 | 4.6.3-fc4 | 4.6.4 | 4.6.5-es1 | 4.7.1 | 4.8.1 | 4.8.2 | 4.9.1 | 4.9.2 | 4.9.2-fc5 | 4.9.3 | 4.9.4 | 4.9.4-es8 | 4.9.4-es9 | 4.9.4-fc3 | 4.9.5 | 4.9.6 | 4.10.1 | 4.11.1 | 4.12.1 | 4.12.2 | 4.12.3 | 4.12.4 | 4.12.5 | 4.12.6 | 4.13.1 | 4.14.1 | 4.15.1 | 4.15.2 | 4.15.3 | 4.15.4 | 4.16.1 | 4.18.1 | 4.18.2 | 4.18.2a
  • unified_computing_system3.1\(1d\) | 3.1\(2b\) | 3.1\(2c\) | 3.1\(2d\) | 3.1\(2e\) | 3.1\(2g\) | 3.1\(2i\) | 3.1\(3a\) | 3.1\(3b\) | 3.1\(3c\) | 3.1\(3d\) | 3.1\(3g\) | 3.1\(3h\) | 3.1\(3i\) | 3.1\(3j\) | 3.1\(3k\) | 4.0\(1.240\) | 4.0\(1a\) | 4.0\(1b\) | 4.0\(1c\) | 4.0\(1d\) | 4.0\(1e\) | 4.0\(1g\) | 4.0\(1h\) | 4.0\(2c\) | 4.0\(2d\) | 4.0\(2f\) | 4.0\(2g\) | 4.0\(2h\) | 4.0\(2i\) | 4.0\(2l\) | 4.0\(2n\) | 4.0\(2o\) | 4.0\(2p\) | 4.0\(2q\) | 4.0\(2r\) | 4.0\(4b\) | 4.0\(4c\) | 4.0\(4d\) | 4.0\(4e\) | 4.0\(4f\) | 4.0\(4h\) | 4.0\(4i\) | 4.0\(4k\) | 4.0\(4l\) | 4.0\(4m\) | 4.0\(4n\) | 4.1\(1c\) | 4.1\(1d\) | 4.1\(1f\) | 4.1\(1g\) | 4.1\(1h\) | 4.1\(2a\) | 4.1\(2b\) | 4.1\(2d\) | 4.1\(2e\) | 4.1\(2f\) | 4.1\(2g\) | 4.1\(2h\) | 4.1\(2j\) | 4.1\(2k\) | 4.1\(2l\) | 4.1\(2m\) | 4.1\(3b\) | 4.1\(3c\) | 4.1\(3d\) | 4.1\(3f\) | 4.1\(3h\) | 4.1\(3i\) | 4.1\(3l\) | 4.1\(3m\) | 4.1\(3n\) | 4.2\(1a\) | 4.2\(1b\) | 4.2\(1c\) | 4.2\(1e\) | 4.2\(1f\) | 4.2\(1g\) | 4.2\(1i\) | 4.2\(1j\) | 4.2\(2a\) | 4.2\(2f\) | 4.2\(2g\) | 4.2\(3b\) | 4.2\(3d\) | 4.2\(3e\) | 4.2\(3g\) | 4.2\(3h\) | 4.2\(3i\) | 4.2\(3j\) | 4.2\(3l\) | 4.2\(3m\) | 4.2\(3n\) | 4.2\(3o\) | 4.2\(3p\) | 4.3\(1.230097\) | 4.3\(1.230124\) | 4.3\(1.230138\) | 4.3\(2.230207\) | 4.3\(2.230270\) | 4.3\(2.240002\) | 4.3\(2.240009\) | 4.3\(2.240037\) | 4.3\(2.240053\) | 4.3\(2.240077\) | 4.3\(2.240090\) | 4.3\(2.240107\) | 4.3\(2.250016\) | 4.3\(2.250021\) | 4.3\(2.250022\) | 4.3\(2.250037\) | 4.3\(2.250045\) | 4.3\(2.250063\) | 4.3\(3.240022\) | 4.3\(3.240043\) | 4.3\(4.240142\) | 4.3\(4.240152\) | 4.3\(4.241014\) | 4.3\(4.241063\) | 4.3\(4.242028\) | 4.3\(4.242038\) | 4.3\(4.242066\) | 4.3\(4.252001\) | 4.3\(4.252002\) | 4.3\(5.240021\) | 4.3\(5.250001\) | 4.3\(5.250030\) | 4.3\(5.250033\) | 4.3\(5.250043\) | 4.3\(5.250045\) | 4.3\(6.250039\) | 4.3\(6.250040\) | 4.3\(6.250044\) | 4.3\(6.250053\) | 4.3\(6.250060\) | 4.3\(6.250101\) | 4.3\(6.250117\) | 4.3\(6.260003\) | 6.0\(1.250127\) | 6.0\(1.250130\) | 6.0\(1.250131\) | 6.0\(1.250174\) | 6.0\(1.250192\) | 6.0\(1.250194\)

1 vendor · 6 products

References

1 links