Cross-Site Scripting Vulnerability in Cisco Cyber Vision Center Management Interface

CVE-2025-20356

What is CVE-2025-20356?

A vulnerability in the web-based management interface of Cisco Cyber Vision Center allows authenticated remote attackers to carry out cross-site scripting (XSS) attacks. This issue arises from inadequate validation of user input, enabling attackers to inject malicious code into specific interface pages. Successful exploitation could permit the execution of arbitrary script code in the context of the interface or access sensitive browser-based information. To exploit this flaw, an attacker requires valid administrative access, typically held by default roles such as Admin and Product users, or any custom user with appropriate permissions.

References