A vulnerability in the web-based management interface of Cisco Catalyst...

4.3 CVSS

Vulnerability Description

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to inject HTML content. This vulnerability is due to improper validation of user-supplied data in element fields. An attacker could exploit this vulnerability by submitting malicious content within requests and persuading a user to view a page that contains injected content. A successful exploit could allow the attacker to modify pages within the web-based management interface, possibly leading to further browser-based attacks against users of the application.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-20179

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-html-3ZKh8d6x

More from Cisco

View All →

CVE-2025-20393

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

Critical 10

CVE-2025-20377

Cisco Unified Intelligence Center API Information Disclosure Vulnerability

Medium 4.3

CVE-2025-20376

Cisco Unified Contact Center Express Remote Code Execution Vulnerability

Medium 6.5

CVE-2025-20375

Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability

Medium 6.5

CVE-2025-20374

Cisco Unified Contact Center Express Arbitrary File Download Vulnerability

Medium 4.9

Affected Vendor

Cisco

View all reports →

Affected Software

Cisco SD-WAN vManage

Vulnerable Versions:

20.3.1, 20.3.2, 20.3.2.1, 20.3.3, 20.3.3.1, 20.3.4, 20.3.4.1, 20.3.4.2, 20.3.5, 20.3.6, 20.3.7, 20.3.7.1, 20.3.4.3, 20.3.5.1, 20.3.7.2, 20.4.1, 20.4.1.1, 20.4.1.2, 20.4.2, 20.4.2.2, 20.4.2.1, 20.4.2.3, 20.5.1, 20.5.1.2, 20.5.1.1, 20.6.1, 20.6.1.1, 20.6.2.1, 20.6.2.2, 20.6.2, 20.6.3, 20.6.3.1, 20.6.4, 20.6.5, 20.6.5.1, 20.6.1.2, 20.6.3.2, 20.6.4.1, 20.6.5.2, 20.6.5.4, 20.6.3.3, 20.6.4.2, 20.6.3.0.45, 20.6.3.0.46, 20.6.3.0.47, 20.6.3.4, 20.6.4.0.21, 20.6.5.1.10, 20.6.5.1.7, 20.6.5.1.9, 20.6.5.2.4, 20.6.5.5, 20.7.1, 20.7.1.1, 20.7.2, 20.8.1, 20.9.1, 20.9.2, 20.9.2.1, 20.9.3, 20.9.3.1, 20.9.2.3, 20.9.3.0.12, 20.9.3.0.16, 20.9.3.0.17, 20.9.3.0.18, 20.9.3.2, 20.9.3.2_LI_Images, 20.9.4, 20.10.1, 20.10.1.1, 20.10.1.2, 20.11.1, 20.11.1.1, 20.11.1.2