CVE-2020-3536

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious data into a specific data field in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface.

• CWE-79
• CWE-79

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-xss-xXeLFpC3Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-xss-xXeLFpC3Third Party Advisory

Published

Oct 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35347CXUUCMS V3 3.1 has a CSRF vulnerability that can add an admi…6.5
• CVE-2020-35349Savsoft Quiz 5 is affected by: Cross Site Scripting (XSS) vi…4.8
• CVE-2020-3535A vulnerability in the loading mechanism of specific DLLs in…8.4
• CVE-2020-35357A buffer overflow can occur when calculating the quantile va…6.5
• CVE-2020-35358DomainMOD domainmod-v4.15.0 is affected by an insufficient s…9.8
• CVE-2020-35359Pure-FTPd 1.0.48 allows remote attackers to prevent legitima…7.5
• CVE-2020-35362DEXT5Upload 2.7.1262310 and earlier is affected by Directory…7.5
• CVE-2020-35364Beijing Huorong Internet Security 5.0.55.2 allows a non-admi…9.8
• CVE-2020-3537A vulnerability in Cisco Jabber for Windows software could a…5.7
• CVE-2020-35370A RCE vulnerability exists in Raysync below 3.3.3.8. An unau…8.8
• CVE-2020-35373In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unaut…6.1
• CVE-2020-35376Xpdf 4.02 allows stack consumption because of an incorrect s…7.5