CVE Feed

    Dashboard / CVE / CVE-2019-1733

    CVE-2019-1733

    A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the NX-API Sandbox interface. An attacker could exploit this vulnerability by persuading a user of the NX-API Sandbox interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected NX-API Sandbox interface.

    Published:May 15, 2019
    Last Modified:Nov 21, 2024
    EPS:May 15, 2019
    EPSS Score:0.00311
    CVSS Score:5.4

    Affected Products

    Vendor
    Cisco
    Product
    Nexus 3000
    Vendor
    Cisco
    Product
    Nexus 3100
    Vendor
    Cisco
    Product
    Nexus 3100-z
    Vendor
    Cisco
    Product
    Nexus 3100v
    Vendor
    Cisco
    Product
    Nexus 3200
    Vendor
    Cisco
    Product
    Nexus 3400
    Vendor
    Cisco
    Product
    Nexus 3500
    Vendor
    Cisco
    Product
    Nexus 3524-x
    Vendor
    Cisco
    Product
    Nexus 3524-xl
    Vendor
    Cisco
    Product
    Nexus 3548-x
    Vendor
    Cisco
    Product
    Nexus 3548-xl
    Vendor
    Cisco
    Product
    Nexus 3600
    Vendor
    Cisco
    Product
    Nexus 9000
    Vendor
    Cisco
    Product
    Nexus 9200
    Vendor
    Cisco
    Product
    Nexus 9300
    Vendor
    Cisco
    Product
    Nexus 9500
    Vendor
    Cisco
    Product
    Nx-os

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-20241 (CVSS 7.4) — A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for …
    CVE-2025-20262 (CVSS 5) — A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Swit…
    CVE-2025-20290 (CVSS 5.5) — A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nex…
    CVE-2024-20284 (CVSS 5.3) — A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged…
    CVE-2024-20285 (CVSS 5.3) — A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged…
    CVE-2024-20286 (CVSS 5.3) — A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged…
    CVE-2024-20399 (CVSS 6) — A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administ…
    CVE-2021-34714 (CVSS 7.4) — A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software…
    CVE-2021-1590 (CVSS 5.3) — A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could all…
    CVE-2021-1588 (CVSS 8.6) — A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software c…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High