CVE-2025-20353
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This is due to insufficient validation of user input. An attacker could exploit this by persuading a user to click a crafted link, potentially allowing execution of arbitrary script code or access to sensitive browser-based information.
Risk Assessment
An attacker could hijack a user session or steal sensitive browser data, potentially leading to system security compromise.
Recommendation
Apply patches provided by Cisco and inform users about the risk of clicking suspicious links.
Other vulnerabilities in Cisco Catalyst Center
See all- CVE-2026-20191High
A vulnerability in Cisco Catalyst Center allows an unauthenticated, remote attacker to read arbitrary files from a restricted container. The issue is due to insufficient validation of user-supplied input.
- CVE-2025-20349Medium
A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user. This is due to insufficient validation of user-supplied input in REST API request parameters. The attacker must have valid credentials for an account with at least the Observer role.
- CVE-2025-20346Medium
A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should require Administrator privileges. The attacker would need valid read-only user credentials. This is due to improper role-based access control (RBAC).
Original NVD description (English source)
A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of the web-based management interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS