cbcvebase.
CVE-2025-20355
published 2025-11-13

CVE-2025-20355: A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a…

medium4.7CVSS 3.1
AVNACLPRNUIRSCCNILAN
A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.

Affected

111 ranges· showing 25
VendorProductVersion rangeFixed in
ciscocatalyst_center_virtual_appliance_http_open_redirect
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center
ciscocisco_digital_network_architecture_center