CVE-2018-15451— Cisco Prime Service Catalog Cross-Site Scripting Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-15451
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Prime Service Catalog Cross-Site Scripting Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input that is processed by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Prime Service Catalog 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Prime Service Catalog（PSC）是美国思科公司（Cisco）的一套通过单一的门户网站提供所有IT服务的服务目录解决方案。该方案支持自动化订购计算、网络、存储和其他数据中心资源的统一服务目录。 CiscoPrime Service Catalog的基于Web的管理界面存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Prime Service Catalog | n/a | - |
II. Public POCs for CVE-2018-15451
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-15451
Please Login to view more intelligence information
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-psc-xssvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2018-15451
Same Patch Batch · Cisco · 2018-11-08 · 15 CVEs total
| CVE-2018-15450 | Cisco Prime Collaboration Assurance File Overwrite Vulnerability | |
| CVE-2018-15447 | Cisco Integrated Management Controller Supervisor SQL Injection Vulnerability | |
| CVE-2018-15448 | Cisco Registered Envelope Service Information Disclosure Vulnerability | |
| CVE-2018-15449 | Cisco Video Surveillance Media Server Denial of Service Vulnerability | |
| CVE-2018-15444 | Cisco Energy Management Suite XML External Entity Vulnerability | |
| CVE-2018-15445 | Cisco Energy Management Suite Cross-Site Request Forgery Vulnerability | |
| CVE-2018-15446 | Cisco Meeting Server Information Disclosure Vulnerability | |
| CVE-2018-15381 | Cisco Unity Express Arbitrary Command Execution Vulnerability | |
| CVE-2018-15393 | Cisco Content Security Management Appliance (SMA) Cross-Site Scripting Vulnerability | |
| CVE-2018-15394 | Cisco Stealthwatch Management Console Authentication Bypass Vulnerability | |
| CVE-2018-15437 | Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability | |
| CVE-2018-15439 | Cisco Small Business Switches Privileged Access Vulnerability | |
| CVE-2018-15443 | Cisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass Vulnerability | |
| CVE-2018-0284 | Cisco Meraki Local Status Page Privilege Escalation Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Prime Service Catalog
- CVE-2022-20680
Cisco Prime Service Catalog Information Disclosure Vulnerabi - CVE-2019-1874
Cisco Prime Service Catalog Cross-Site Request Forgery Vulne - CVE-2019-1875
Cisco Prime Service Catalog Cross-Site Scripting Vulnerabili - CVE-2018-0285
Cisco Prime Service Catalog 安全漏洞 - CVE-2018-0200
Cisco Prime Service Catalog 跨站脚本漏洞
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido IDOR漏洞致用户隐私泄露 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-79
- CVE-2026-42455
LinkWarden: Stored XSS via Client-Side Archive Upload (Unsan - CVE-2026-42451
Grimmory: Stored XSS via Malicious EPUB Enables Session Toke - CVE-2026-42556
Postiz stored XSS in public preview page - CVE-2026-42224
ipl/web is vulnerable to reflected XSS by malformed search r - CVE-2026-42192
Plunk: Stored XSS in campaign view
V. Comments for CVE-2018-15451
No comments yet