Medium severity6.1NVD Advisory· Published Sep 18, 2019· Updated Jun 17, 2026
CVE-2019-1975
CVE-2019-1975
Description
A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a user to an attacker-controlled web page that contains a malicious HTML iframe. A successful exploit could allow the attacker to conduct clickjacking or other clientside browser attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:o:cisco:hyperflex_hx220c_af_m5_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:hyperflex_hx220c_af_m5_firmware:*:*:*:*:*:*:*:*range: <=3.5.2f
- cpe:2.3:o:cisco:hyperflex_hx220c_af_m5_firmware:4.0\(1a\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:hyperflex_hx220c_edge_m5_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:hyperflex_hx220c_edge_m5_firmware:*:*:*:*:*:*:*:*range: <=3.5.2f
- cpe:2.3:o:cisco:hyperflex_hx220c_edge_m5_firmware:4.0\(1a\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:hyperflex_hx220c_m5_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:hyperflex_hx220c_m5_firmware:*:*:*:*:*:*:*:*range: <=3.5.2f
- cpe:2.3:o:cisco:hyperflex_hx220c_m5_firmware:4.0\(1a\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:hyperflex_hx240c_af_m5_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:hyperflex_hx240c_af_m5_firmware:*:*:*:*:*:*:*:*range: <=3.5.2f
- cpe:2.3:o:cisco:hyperflex_hx240c_af_m5_firmware:4.0\(1a\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:hyperflex_hx240c_m5_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:hyperflex_hx240c_m5_firmware:*:*:*:*:*:*:*:*range: <=3.5.2f
- cpe:2.3:o:cisco:hyperflex_hx240c_m5_firmware:4.0\(1a\):*:*:*:*:*:*:*
- Range: unspecified
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.