This vulnerability affects multiple versions of Cisco Enterprise NFV Infrastructure Software's web management interface. An authenticated attacker with admin rights can perform a stored XSS attack by injecting malicious scripts due to improper input neutralization during web page generation. Successful exploitation could lead to arbitrary script execution in the victim's browser or unauthorized access to sensitive browser-based information. The attack requires user interaction (clicking a crafted link) and privileges to authenticate to the interface.

The impact includes the potential execution of arbitrary script code in the context of the targeted user's browser session within the Cisco management interface. This could lead to unauthorized disclosure of sensitive information accessible via the browser or manipulation of the interface as the victim user. The vulnerability does not directly impact system availability. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts confidentiality and integrity partially.

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Until an official fix is available, limit administrative access to the management interface to trusted users only and avoid clicking suspicious links. Monitor Cisco's security advisories for updates regarding patches or workarounds.