A vulnerability in the web-based management interface of Cisco Crosswork...

4.7 CVSS

Vulnerability Description

A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-20369

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-ordir-MNM8YqzO

More from Cisco

View All →

CVE-2025-20393

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

Critical 10

CVE-2025-20377

Cisco Unified Intelligence Center API Information Disclosure Vulnerability

Medium 4.3

CVE-2025-20376

Cisco Unified Contact Center Express Remote Code Execution Vulnerability

Medium 6.5

CVE-2025-20375

Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability

Medium 6.5

CVE-2025-20374

Cisco Unified Contact Center Express Arbitrary File Download Vulnerability

Medium 4.9

Affected Vendor

Cisco

View all reports →

Affected Software

Cisco Network Services Orchestrator

Vulnerable Versions:

5.4, 5.5, 5.6, 5.7, 5.8, 5.1.1.1, 5.1.1.3, 5.1.2, 5.2.0.4, 5.2.1, 5.2.1.1, 5.2.3.2, 5.3.1, 5.3.4.3, 5.4.0.1, 5.4.1, 5.4.1.1, 5.4.2, 5.4.3.1, 5.4.4.1, 5.4.4, 5.4.4.3, 5.4.3.3, 5.4.5.1, 5.4.5.2, 5.4.5, 5.4.6, 5.4.7, 5.4.7.1, 5.5.1, 5.5.2, 5.5.2.1, 5.5.2.3, 5.5.2.4, 5.5.2.9, 5.5.2.10, 5.5.3, 5.5.2.7, 5.5.2.12, 5.5.4.1, 5.5.3.1, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.6.1, 5.6.3, 5.6.2, 5.6.5, 5.6.6, 5.6.6.1, 5.6.7, 5.6.7.1, 5.6.8, 5.6.8.1, 5.6.11, 5.6.13, 5.6.14, 5.6.14.1, 5.7.1.1, 5.7.1, 5.7.2, 5.7.2.1, 5.7.3, 5.7.4, 5.7.5, 5.7.5.1, 5.7.6, 5.7.6.2, 5.7.8, 5.7.10, 5.7.10.2, 5.7.11, 5.7.13, 5.7.14, 5.7.9, 5.7.9.1, 5.8.1, 5.8.2, 5.8.2.1, 5.8.5, 5.8.10, 5.8.11, 5.8.9, 6.1, 6.2, 6.0.1.1, 6.0.10, 6.0.5, 6.0.8, 6.1.2.1, 6.1.5, 6.1.6