4.8

CVE-2026-20198: cisco cisco enterprise nfv infrastructure software Cross-site Scripting

CVSS: 4.8v3.1MediumAwaiting analysis
Published 05-08-2026Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2026-20198 is a medium (CVSS 4.8) Cross-site Scripting vulnerability in cisco cisco enterprise nfv infrastructure software. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20% of scored vulnerabilities.

Overall risk
19/100
0100
Low · default modelHow is this calculated?
CVSS score
4.8/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.29%
0%100%
Low · +0.08 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 05-08-2026
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.29%

Chance of exploitation in the next 30 days

Percentile

20%

Versus all other CVEs

30-day change

+0.08 pp

From 0.21% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.29%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco3 products
  • cisco enterprise nfv infrastructure software4.1.1 | 3.9.1 | 3.5.2 | 3.12.2 | 3.6.2 | 3.9.2 | 3.11.3 | 3.11.1 | 3.5.1 | 3.3.1 | 3.10.2 | 3.12.1b | 3.4.1 | 3.12.1a | 3.6.3 | 3.8.1 | 3.11.2 | 3.12.1 | 3.12.3 | 3.10.1 | 3.6.1 | 3.10.3 | 3.7.1 | 4.1.2 | 4.2.1 | 4.2.2 | 4.4.1 | 4.4.2 | 4.5.1 | 4.4.3 | 4.6.1 | 4.7.1 | 4.6.2-FC2 | 4.6.2-FC3 | 4.6.2 | 4.8.1 | 4.8.2 | 4.9.1 | 4.6.3 | 4.9.2-FC5 | 4.9.2 | 4.10.1 | 4.9.3 | 4.11.1 | 4.9.4 | 4.12.1 | 4.6.4 | 4.12.2 | 4.13.1 | 4.9.4-ES8 | 4.9.5 | 4.12.3 | 4.6.5-ES1 | 4.9.4-ES9 | 4.14.1 | 4.6.3-FC4 | 4.9.4-FC3 | 4.12.4 | 4.15.1 | 4.9.6 | 4.16.1 | 4.15.2 | 4.12.5 | 4.15.3 | 4.15.4 | 4.18.1 | 4.12.6 | 4.18.2 | 4.18.2a | 4.15.5 | 4.12.7 | 4.12.8
  • cisco unified computing system e-series software (ucse)3.2.7 | 3.2.6 | 3.2.4 | 3.2.10 | 3.2.2 | 3.2.3 | 3.2.1 | 3.2.11.1 | 3.2.8 | 3.1.1 | 3.1.2 | 3.1.4 | 3.1.3 | 3.1.5 | 3.1.0 | 3.2.11.3 | 3.2.11.5 | 3.2.12.2 | 3.2.13.6 | 3.2.14 | 4.11.1 | 3.2.15 | 4.12.1 | 3.2.15.3 | 4.12.2 | 3.2.16.1 | 4.00 | 4.15.2 | 4.02 | 3.2.17.1 | 4.15.3
  • cisco unified computing system (standalone)4.0(2g) | 3.1(2i) | 3.1(1d) | 4.0(4i) | 4.1(1c) | 4.0(2c) | 4.0(1e) | 4.0(2h) | 4.0(4h) | 4.0(1h) | 4.0(2l) | 3.1(3g) | 4.0(1.240) | 4.0(2f) | 4.0(1g) | 4.0(2i) | 3.1(3i) | 4.0(4d) | 4.1(1d) | 3.1(3c) | 4.0(4k) | 3.1(2d) | 3.1(3a) | 3.1(3j) | 4.0(2d) | 4.1(1f) | 4.0(4j) | 4.0(2m) | 4.0(2k) | 4.0(1c) | 4.0(4f) | 4.0(4c) | 3.1(3d) | 3.1(2g) | 3.1(2c) | 4.0(1d) | 3.1(2e) | 4.0(1a) | 4.0(1b) | 3.1(3b) | 4.0(4b) | 3.1(2b) | 4.0(4e) | 3.1(3h) | 4.0(4l) | 4.1(1g) | 4.1(2a) | 4.0(2n) | 4.1(1h) | 3.1(3k) | 4.1(2b) | 4.0(2o) | 4.0(4m) | 4.1(2d) | 4.1(3b) | 4.0(2p) | 4.1(2e) | 4.1(2f) | 4.0(4n) | 4.0(2q) | 4.1(3c) | 4.0(2r) | 4.1(3d) | 4.1(2g) | 4.1(2h) | 4.1(3g) | 4.1(3f) | 4.1(2j) | 4.1(2k) | 4.1(3h) | 4.2(2a) | 4.1(3i) | 4.2(2f) | 4.2(2g) | 4.2(3b) | 4.1(3l) | 4.2(3d) | 4.3(1.230097) | 4.2(1e) | 4.2(1b) | 4.2(1j) | 4.2(1i) | 4.2(1f) | 4.2(1a) | 4.2(1c) | 4.2(1g) | 4.3(1.230124) | 4.1(2l) | 4.2(3e) | 4.3(1.230138) | 4.2(3g) | 4.3(2.230207) | 4.2(3h) | 4.2(3i) | 4.3(2.230270) | 4.1(3m) | 4.1(2m) | 4.3(2.240002) | 4.3(3.240022) | 4.2(3j) | 4.1(3n) | 4.3(2.240009) | 4.3(3.240041) | 4.2(3k) | 4.3(3.240043) | 4.3(4.240142) | 4.3(2.240037) | 4.3(2.240053) | 4.3(4.240152) | 4.2(3l) | 4.3(2.240077) | 4.3(4.242028) | 4.3(4.241063) | 4.3(4.242038) | 4.2(3m) | 4.3(2.240090) | 4.3(5.240021) | 4.3(2.240107) | 4.3(4.242066) | 4.2(3n) | 4.3(5.250001) | 4.2(3o) | 4.3(2.250016) | 4.3(2.250021) | 4.3(5.250030) | 4.3(2.250022) | 4.3(6.250039) | 4.3(6.250040) | 4.3(5.250033) | 4.3(6.250044) | 4.3(6.250053) | 4.3(2.250037) | 4.3(2.250045) | 4.3(4.252001) | 4.3(4.252002) | 6.0(1.250127) | 4.2(3p) | 6.0(1.250131) | 4.3(6.250101) | 6.0(1.250174) | 4.3(6.250117) | 4.3(5.250043) | 4.3(5.250045) | 4.3(6.250060) | 6.0(1.250130) | 4.3(4.241014) | 4.3(2.250063) | 6.0(1.250192) | 4.3(6.260003) | 6.0(1.250194) | 4.3(6.260017) | 4.3(2.260007) | 6.0(2.260044) | 6.0(2.260069) | 4.3(6.260033) | 4.2(3q)

1 vendor · 3 products

References

1 links