296,138
Total vulnerabilities in the database
A vulnerability in the API subsystem and in the web-management interface of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to access sensitive data. This vulnerability exists because the web-management interface and certain HTTP-based APIs do not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to access sensitive files on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
| Software | From | Fixed in |
|---|---|---|
| cisco / network_services_orchestrator | 5.4.0.2 | 5.4.0.2.x |
| cisco / network_services_orchestrator | 5.4 | 5.4.x |
| cisco / network_services_orchestrator | 5.4.0.1 | 5.4.0.1.x |
| cisco / network_services_orchestrator | 5.3.1 | 5.3.1.x |