CVE-2024-20511

Summary

CVE-2024-20511 is a cross-site scripting (XSS) vulnerability affecting the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME). An unauthenticated, remote attacker can exploit this vulnerability by crafting a malicious link and persuading a user to click it. Successful exploitation allows the attacker to execute arbitrary script code in the context of the affected interface or gain access to sensitive browser-based information. The root cause of this vulnerability is the web-based management interface's failure to properly validate user-supplied input.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.