Cross-Site Scripting Vulnerability in Cisco Cyber Vision Center Management Interface

CVE-2025-20356

What is CVE-2025-20356?

A vulnerability in the web-based management interface of Cisco Cyber Vision Center allows authenticated remote attackers to carry out cross-site scripting (XSS) attacks. This issue arises from inadequate validation of user input, enabling attackers to inject malicious code into specific interface pages. Successful exploitation could permit the execution of arbitrary script code in the context of the interface or access sensitive browser-based information. To exploit this flaw, an attacker requires valid administrative access, typically held by default roles such as Admin and Product users, or any custom user with appropriate permissions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References