Product:
Cisco Catalyst Center
Summary
A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of the web-based management interface to click a crafted link.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.1 | CVE-2025-20353 |
Exploitation
To exploit this vulnerability, an attacker must convince a user of the web-based management interface to click on a specially crafted link. If successful, the attacker could execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.
Affected Products
- Cisco Catalyst Center: Affected by XSS vulnerability due to insufficient input validation.
Mitigation
To mitigate this vulnerability, users should avoid clicking on untrusted links and ensure that they are using the latest version of the software. Regularly updating the system and applying security patches can help protect against such vulnerabilities.