CVE-2026-20091

Summary

A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.

This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious data into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid credentials for a user account with the role of Administrator or AAA Administrator. 

Affected Software

VendorProductVersion RangeStatus
CiscoCisco Firepower Extensible Operating System (FXOS)2.14.1.131affected
CiscoCisco Firepower Extensible Operating System (FXOS)2.14.1.143affected
CiscoCisco Firepower Extensible Operating System (FXOS)2.14.1.163affected
CiscoCisco Firepower Extensible Operating System (FXOS)2.14.1.167affected
CiscoCisco Firepower Extensible Operating System (FXOS)2.16.0.128affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.3.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.3.12affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.2.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.1.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.2.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.3.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.2.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.3.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.1.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.8affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.10affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.13affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.18affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.24affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.26affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.1.28affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.29affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.30affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.35affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.37affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2.11affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2.13affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.39affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.38affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2.14affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.40affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3.14affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.41affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.10affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.47affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3.15affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.1.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.11affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.48affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3.19affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.13affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.50affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.15affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.52affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3.23affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.2.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.54affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.20affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.2.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.55affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.2.8affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.14affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.56affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.30affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3.39affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.19affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.58affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.12affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3.46affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.27affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.18affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3.53affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3.55affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.38affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.33affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.62affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.39affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3.56affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.42affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.22affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.24affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.48affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.8affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.27affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.65affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.55affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.22affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2.10affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.57affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.28affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.39affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.67affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.24affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2.21affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.61affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.31affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.29affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2.22affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.62affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.34affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.67affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.40affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.71affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.47affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.45affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.37affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.76affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.50affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.10affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.52affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.13affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.53affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.82affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.16affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.42affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.57affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.84affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.20affected
CiscoCisco Unified Computing System (Managed)4.0(4h)affected
CiscoCisco Unified Computing System (Managed)4.1(1a)affected
CiscoCisco Unified Computing System (Managed)4.0(1c)affected
CiscoCisco Unified Computing System (Managed)4.0(4a)affected
CiscoCisco Unified Computing System (Managed)4.0(1a)affected
CiscoCisco Unified Computing System (Managed)4.0(1d)affected
CiscoCisco Unified Computing System (Managed)4.1(1c)affected
CiscoCisco Unified Computing System (Managed)4.0(2a)affected
CiscoCisco Unified Computing System (Managed)4.0(4g)affected
CiscoCisco Unified Computing System (Managed)4.0(2e)affected
CiscoCisco Unified Computing System (Managed)4.0(4c)affected
CiscoCisco Unified Computing System (Managed)4.0(4f)affected
CiscoCisco Unified Computing System (Managed)4.0(1b)affected
CiscoCisco Unified Computing System (Managed)4.0(2b)affected
CiscoCisco Unified Computing System (Managed)4.0(2d)affected
CiscoCisco Unified Computing System (Managed)4.1(1b)affected
CiscoCisco Unified Computing System (Managed)4.0(4d)affected
CiscoCisco Unified Computing System (Managed)4.0(4e)affected
CiscoCisco Unified Computing System (Managed)4.0(4b)affected
CiscoCisco Unified Computing System (Managed)4.1(2a)affected
CiscoCisco Unified Computing System (Managed)4.1(1d)affected
CiscoCisco Unified Computing System (Managed)4.0(4i)affected
CiscoCisco Unified Computing System (Managed)4.1(1e)affected
CiscoCisco Unified Computing System (Managed)4.1(2b)affected
CiscoCisco Unified Computing System (Managed)4.0(4k)affected
CiscoCisco Unified Computing System (Managed)4.1(3a)affected
CiscoCisco Unified Computing System (Managed)4.1(3b)affected
CiscoCisco Unified Computing System (Managed)4.1(2c)affected
CiscoCisco Unified Computing System (Managed)4.0(4l)affected
CiscoCisco Unified Computing System (Managed)4.1(4a)affected
CiscoCisco Unified Computing System (Managed)4.1(3c)affected
CiscoCisco Unified Computing System (Managed)4.1(3d)affected
CiscoCisco Unified Computing System (Managed)4.2(1c)affected
CiscoCisco Unified Computing System (Managed)4.2(1d)affected
CiscoCisco Unified Computing System (Managed)4.0(4m)affected
CiscoCisco Unified Computing System (Managed)4.1(3e)affected
CiscoCisco Unified Computing System (Managed)4.2(1f)affected
CiscoCisco Unified Computing System (Managed)4.1(3f)affected
CiscoCisco Unified Computing System (Managed)4.2(1i)affected
CiscoCisco Unified Computing System (Managed)4.1(3h)affected
CiscoCisco Unified Computing System (Managed)4.2(1k)affected
CiscoCisco Unified Computing System (Managed)4.2(1l)affected
CiscoCisco Unified Computing System (Managed)4.0(4n)affected
CiscoCisco Unified Computing System (Managed)4.2(1m)affected
CiscoCisco Unified Computing System (Managed)4.1(3i)affected
CiscoCisco Unified Computing System (Managed)4.2(2a)affected
CiscoCisco Unified Computing System (Managed)4.2(1n)affected
CiscoCisco Unified Computing System (Managed)4.1(3j)affected
CiscoCisco Unified Computing System (Managed)4.2(2c)affected
CiscoCisco Unified Computing System (Managed)4.2(2d)affected
CiscoCisco Unified Computing System (Managed)4.2(3b)affected
CiscoCisco Unified Computing System (Managed)4.1(3k)affected
CiscoCisco Unified Computing System (Managed)4.0(4o)affected
CiscoCisco Unified Computing System (Managed)4.2(2e)affected
CiscoCisco Unified Computing System (Managed)4.2(3d)affected
CiscoCisco Unified Computing System (Managed)4.2(3e)affected
CiscoCisco Unified Computing System (Managed)4.2(3g)affected
CiscoCisco Unified Computing System (Managed)4.1(3l)affected
CiscoCisco Unified Computing System (Managed)4.3(2b)affected
CiscoCisco Unified Computing System (Managed)4.2(3h)affected
CiscoCisco Unified Computing System (Managed)4.2(3i)affected
CiscoCisco Unified Computing System (Managed)4.3(2c)affected
CiscoCisco Unified Computing System (Managed)4.1(3m)affected
CiscoCisco Unified Computing System (Managed)4.3(2e)affected
CiscoCisco Unified Computing System (Managed)4.3(3a)affected
CiscoCisco Unified Computing System (Managed)4.2(3j)affected
CiscoCisco Unified Computing System (Managed)4.3(3c)affected
CiscoCisco Unified Computing System (Managed)4.3(4a)affected
CiscoCisco Unified Computing System (Managed)4.2(3k)affected
CiscoCisco Unified Computing System (Managed)4.3(4b)affected
CiscoCisco Unified Computing System (Managed)4.3(4c)affected
CiscoCisco Unified Computing System (Managed)4.2(3l)affected
CiscoCisco Unified Computing System (Managed)4.3(4d)affected
CiscoCisco Unified Computing System (Managed)4.3(2f)affected
CiscoCisco Unified Computing System (Managed)4.2(3m)affected
CiscoCisco Unified Computing System (Managed)4.3(5a)affected
CiscoCisco Unified Computing System (Managed)4.3(4e)affected
CiscoCisco Unified Computing System (Managed)4.1(3n)affected
CiscoCisco Unified Computing System (Managed)4.3(4f)affected
CiscoCisco Unified Computing System (Managed)4.2(3n)affected
CiscoCisco Unified Computing System (Managed)4.3(5c)affected
CiscoCisco Unified Computing System (Managed)4.2(3o)affected
CiscoCisco Unified Computing System (Managed)4.3(5d)affected
CiscoCisco Unified Computing System (Managed)4.3(5e)affected
CiscoCisco Unified Computing System (Managed)4.2(3p)affected

Weaknesses

  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References