Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability
A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization of input to the web interface. An attacker could exploit this vulnerability by convincing an authenticated user to click a malicious link. A successful exploit could allow the attacker to inject HTML into the browser of an authenticated Cisco Catalyst SD-WAN Manager user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-20216US | medium4.3 | — | ||
A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browse… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- Cisco Catalyst SD-WAN Manager Certificate Validation Vulnerabilityexternal
- Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerabilityexternal
- Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerabilityexternal
- Cisco Catalyst SD-WAN Manager Arbitrary File Creation Vulnerabilityexternal
- Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerabilityself
- Cisco Catalyst SD-WAN Manager Stored Cross-Site Scripting Vulnerabilityexternal
- Cisco Security Vulnerability Policyexternal
Behebungen (1)
- BehobenCisco Catalyst SD-WAN Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan