CVE-2020-3518

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of the affected software. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

• CWE-79
• CWE-79

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-JnHSWG5CVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-JnHSWG5CVendor Advisory

Published

Aug 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3517A vulnerability in the Cisco Fabric Services component of Ci…8.6
• CVE-2020-35170Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, D…5.4
• CVE-2020-35173The Amaze File Manager application before 3.4.2 for Android …9.8
• CVE-2020-35175Frappe Framework 12 and 13 does not properly validate the HT…5.3
• CVE-2020-35176In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a…5.3
• CVE-2020-35177HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed…5.3
• CVE-2020-35184The official composer docker images before 1.8.3 contain a b…9.8
• CVE-2020-35185The official ghost docker images before 2.16.1-alpine (Alpin…9.8
• CVE-2020-35186The official adminer docker images before 4.7.0-fastcgi cont…9.8
• CVE-2020-35187The official telegraf docker images before 1.9.4-alpine (Alp…9.8
• CVE-2020-35188Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-35189The official kong docker images before 1.0.2-alpine (Alpine …9.8