© 2026 vulntracker.io

CVE-2026-20198

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

MEDIUM

4.8

CVSS Score

Published: August 5, 2026 at 04:18 PM UTC

Updated: August 6, 2026 at 04:03 PM UTC

3 products affected across 1 vendorUnified Computing SystemEnterprise Nfv InfrastructureUnified Computing System E Series

Using Cisco Enterprise NFV Infrastructure Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Enterprise NFV Infrastructure Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.8

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Enterprise Nfv Infrastructure · Cisco

60%

3.10.1 3.10.2 3.10.3 3.11.1 3.11.2 3.11.3 3.12.1 3.12.1a 3.12.1b 3.12.2 3.12.3 3.3.1 3.4.1 3.5.1 3.5.2 3.6.1 3.6.2 3.6.3 3.7.1 3.8.1 3.9.1 3.9.2 4.1.1 4.1.2 4.10.1 4.11.1 4.12.1 4.12.2 4.12.3 4.12.4 4.12.5 4.12.6 4.12.7 4.12.8 4.13.1 4.14.1 4.15.1 4.15.2 4.15.3 4.15.4 4.15.5 4.16.1 4.18.1 4.18.2 4.18.2a 4.2.1 4.2.2 4.4.1 4.4.2 4.4.3 4.5.1 4.6.1 4.6.24.6.2-FC24.6.2-FC3 4.6.34.6.3-FC44.6.44.6.5-ES14.7.1 4.8.1 4.8.2 4.9.1 4.9.24.9.2-FC54.9.3 4.9.44.9.4-ES84.9.4-ES94.9.4-FC3 4.9.5 4.9.6

Unified Computing System · Cisco

60%

3.1(1d)3.1(2b)3.1(2c)3.1(2d)3.1(2e)3.1(2g)3.1(2i)3.1(3a)3.1(3b)3.1(3c)3.1(3d)3.1(3g)3.1(3h)3.1(3i)3.1(3j)3.1(3k)4.0(1.240)4.0(1a)4.0(1b)4.0(1c)4.0(1d)4.0(1e)4.0(1g)4.0(1h)4.0(2c)4.0(2d)4.0(2f)4.0(2g)4.0(2h)4.0(2i)4.0(2k)4.0(2l)4.0(2m)4.0(2n)4.0(2o)4.0(2p)4.0(2q)4.0(2r)4.0(4b)4.0(4c)4.0(4d)4.0(4e)4.0(4f)4.0(4h)4.0(4i)4.0(4j)4.0(4k)4.0(4l)4.0(4m)4.0(4n)4.1(1c)4.1(1d)4.1(1f)4.1(1g)4.1(1h)4.1(2a)4.1(2b)4.1(2d)4.1(2e)4.1(2f)4.1(2g)4.1(2h)4.1(2j)4.1(2k)4.1(2l)4.1(2m)4.1(3b)4.1(3c)4.1(3d)4.1(3f)4.1(3g)4.1(3h)4.1(3i)4.1(3l)4.1(3m)4.1(3n)4.2(1a)4.2(1b)4.2(1c)4.2(1e)4.2(1f)4.2(1g)4.2(1i)4.2(1j)4.2(2a)4.2(2f)4.2(2g)4.2(3b)4.2(3d)4.2(3e)4.2(3g)4.2(3h)4.2(3i)4.2(3j)4.2(3k)4.2(3l)4.2(3m)4.2(3n)4.2(3o)4.2(3p)4.2(3q)4.3(1.230097)4.3(1.230124)4.3(1.230138)4.3(2.230207)4.3(2.230270)4.3(2.240002)4.3(2.240009)4.3(2.240037)4.3(2.240053)4.3(2.240077)4.3(2.240090)4.3(2.240107)4.3(2.250016)4.3(2.250021)4.3(2.250022)4.3(2.250037)4.3(2.250045)4.3(2.250063)4.3(2.260007)4.3(3.240022)4.3(3.240041)4.3(3.240043)4.3(4.240142)4.3(4.240152)4.3(4.241014)4.3(4.241063)4.3(4.242028)4.3(4.242038)4.3(4.242066)4.3(4.252001)4.3(4.252002)4.3(5.240021)4.3(5.250001)4.3(5.250030)4.3(5.250033)4.3(5.250043)4.3(5.250045)4.3(6.250039)4.3(6.250040)4.3(6.250044)4.3(6.250053)4.3(6.250060)4.3(6.250101)4.3(6.250117)4.3(6.260003)4.3(6.260017)4.3(6.260033)6.0(1.250127)6.0(1.250130)6.0(1.250131)6.0(1.250174)6.0(1.250192)6.0(1.250194)6.0(2.260044)6.0(2.260069)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

Source: cverecord

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-7EhBFxBp

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

4.8MEDIUMcisco

Attack Vector: NETWORK
Complexity: LOW
Privileges: HIGH
User Interaction: REQUIRED
Scope: CHANGED
Confidentiality: LOW
Integrity: LOW
Availability: NONE

Vector?

Quick Info

StatusAWAITING ANALYSIS

CWE

CWE-79

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card