cisco-sa-webui-xss-VWyDgjOU: Cisco IOS XE Software Web Authentication Reflected Cross-Site Scripting Vulnerability

Published Sep 24, 2025

Updated

A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS) on an affected device.This vulnerability is due to improper sanitization of user-supplied input. An

Affected Software

1 affected component

Cisco IOS XE Software

Event History

Sep 24, 2025

Advisory Published

via Cisco·04:00 PM

Data Sourced

via Cisco·04:00 PM

DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2025-20240

Frequently Asked Questions

What is the severity of cisco-sa-webui-xss-VWyDgjOU?

The severity of cisco-sa-webui-xss-VWyDgjOU is classified as high due to its potential for exploitation through reflected cross-site scripting.

How do I fix cisco-sa-webui-xss-VWyDgjOU?

To fix cisco-sa-webui-xss-VWyDgjOU, you should upgrade to the latest version of Cisco IOS XE Software that addresses this vulnerability.

Who is affected by cisco-sa-webui-xss-VWyDgjOU?

Any unauthenticated user can exploit cisco-sa-webui-xss-VWyDgjOU on devices running affected versions of Cisco IOS XE Software.

Can cisco-sa-webui-xss-VWyDgjOU be exploited remotely?

Yes, cisco-sa-webui-xss-VWyDgjOU can be exploited remotely by an unauthenticated attacker.

What type of attack is associated with cisco-sa-webui-xss-VWyDgjOU?

cisco-sa-webui-xss-VWyDgjOU is associated with reflected cross-site scripting (XSS) attacks.