CVE-2025-20216 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject…
Medium CVSS: 4.7

CVE-2025-20216

A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user.

This vulnerability is due to improper sanitization of input to the web interface. An attacker could exploit this vulnerability by convincing an authenticated user to click a malicious link. A successful exploit could allow the attacker to inject HTML into the browser of an authenticated Cisco Catalyst SD-WAN Manager user.
Vendor
Cisco
Product
Catalyst Sd-wan Manager
CWE
CWE-74
Yayın Tarihi
2025-05-07 18:15:41
Güncelleme
2025-07-29 13:47:28
Source Identifier
psirt@cisco.com
KEV Date Added
-

Kategoriler

Referanslar