Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Arista Networks CloudVision CUE — arista.com/en/support/advisories-notices/security-advisory/… Clear all filters
TI-2026-68903 CVE-2026-101157 · GHSA-pf63-ww58-qf49

Stored cross-site scripting in Arista CloudVision CUE

Priority MEDIUM 41

A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content.

CVSS 4.0CRITICAL 9.3 Adjacent network No auth User interaction EPSS 0.00218 Published 2026-10-06 No fix listed CWE-79
TI-2026-68902 CVE-2026-101156 · GHSA-5f8p-q6pp-92x2

Stored cross-site scripting in Arista CloudVision CUE

Priority LOW 29

A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration.

CVSS 4.0MEDIUM 6.2 Network High privileges User interaction EPSS 0.0029 Published 2026-10-06 No fix listed CWE-79