Back

MEDIUM

Cisco SD-WAN vManage Stored Cross-Site Scripting Vulnerability

Published May 7, 2025

Description

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to conduct a stored cross-site scripting attack (XSS) on an affected system.  This vulnerability is due to improper sanitization of user input to the web-based management interface. An attacker could exploit this vulnerability by submitting a malicious script through the interface. A successful exploit could allow the attacker to conduct a stored XSS attack on the affected system.

Affected products

Remediation

No remediation recorded yet.

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner cisco
Published May 7, 2025
Updated May 7, 2025
Reserved Oct 10, 2024
CISA Vulnrichment
Updated May 7, 2025
NVD
Status Analyzed
Modified Jun 17, 2026
Red Hat
Severity n/a
Public date n/a
ENISA EUVD
Assigner cisco
Published May 7, 2025
Updated May 7, 2025
Exploited since n/a
EUVD-2025-13889