HTML Injection Vulnerability in Cisco Catalyst SD-WAN Manager

CVE-2025-20216

Summary

A vulnerability exists in the web interface of Cisco Catalyst SD-WAN Manager that permits an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This issue arises from inadequate input sanitization within the web interface, enabling an attacker to exploit this vulnerability by persuading a legitimate user to click on a crafted link. If successfully exploited, this vulnerability could allow the attacker to manipulate the presentation of data within the browser, potentially leading to further compromise. Users are urged to exercise caution and implement appropriate security measures to mitigate the risk.

References