cisco-sa-iox-xss-LpGkzwtJMediumCVSS 4.8

Cisco IOx Application Hosting Environment Stored Cross-Site Scripting Vulnerability

Published
March 25, 2026
Last Modified
March 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-20112 · pending

📋 Description

🎯 Affected products253

  • Cisco IOS XE Software 16.6.1
  • Cisco IOS XE Software 16.6.2
  • Cisco IOS XE Software 16.6.3
  • Cisco IOS XE Software 16.6.4
  • Cisco IOS XE Software 16.6.5
  • Cisco IOS XE Software 16.6.4s
  • Cisco IOS XE Software 16.6.4a
  • Cisco IOS XE Software 16.6.5a
  • Cisco IOS XE Software 16.6.6
  • Cisco IOS XE Software 16.6.5b
  • Cisco IOS XE Software 16.6.7
  • Cisco IOS XE Software 16.6.7a
  • Cisco IOS XE Software 16.6.8
  • Cisco IOS XE Software 16.6.9
  • Cisco IOS XE Software 16.6.10
  • Cisco IOS XE Software 16.7.1
  • Cisco IOS XE Software 16.7.1a
  • Cisco IOS XE Software 16.7.1b
  • Cisco IOS XE Software 16.7.2
  • Cisco IOS XE Software 16.7.3
  • Cisco IOS XE Software 16.7.4
  • Cisco IOS XE Software 16.8.1
  • Cisco IOS XE Software 16.8.1a
  • Cisco IOS XE Software 16.8.1b
  • Cisco IOS XE Software 16.8.1s
  • Cisco IOS XE Software 16.8.1c
  • Cisco IOS XE Software 16.8.1d
  • Cisco IOS XE Software 16.8.2
  • Cisco IOS XE Software 16.8.1e
  • Cisco IOS XE Software 16.8.3
  • +223 more not shown

🔗 References (2)