CVE-2025-20353: Cisco Catalyst Center Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of the web-based management interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20353?
CVE-2025-20353 has been rated as a medium severity vulnerability due to its potential to allow cross-site scripting (XSS) attacks.
How do I fix CVE-2025-20353?
To fix CVE-2025-20353, ensure that your Cisco Catalyst Center is updated to the latest available software version that addresses this vulnerability.
Who is affected by CVE-2025-20353?
Organizations using the web-based management interface of Cisco Catalyst Center are affected by CVE-2025-20353.
What type of attack does CVE-2025-20353 facilitate?
CVE-2025-20353 facilitates a cross-site scripting (XSS) attack that can be exploited by unauthenticated remote attackers.
Is user authentication required to exploit CVE-2025-20353?
No, CVE-2025-20353 can be exploited by unauthenticated users, making it more critical for affected systems to be updated promptly.