Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability
A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization of input to the web interface. An attacker could exploit this vulnerability by convincing an authenticated user to click a malicious link. A successful exploit could allow the attacker to inject HTML into the browser of an authenticated Cisco Catalyst SD-WAN Manager user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-20216US | medium4.3 | — | ||
A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browse… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- Cisco Catalyst SD-WAN Manager Certificate Validation Vulnerabilityexternal
- Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerabilityexternal
- Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerabilityexternal
- Cisco Catalyst SD-WAN Manager Arbitrary File Creation Vulnerabilityexternal
- Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerabilityself
- Cisco Catalyst SD-WAN Manager Stored Cross-Site Scripting Vulnerabilityexternal
- Cisco Security Vulnerability Policyexternal
remediations (1)
- FixedCisco Catalyst SD-WAN Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan