Skip to content
fr Sign in
5.4 Medium

CVE-2026-20108 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated,…

Description

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of the web-based management interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Affected products and versions

Product Affected versions Fixed in
Cisco Catalyst SD-WAN Manager 20.18.1 No fix stated
Cisco Catalyst SD-WAN Manager 20.16.1 No fix stated
Cisco Catalyst SD-WAN Manager 20.15 20.15.1 → 20.15.4.2 No fix stated
Cisco Catalyst SD-WAN Manager 20.14.1 No fix stated
Cisco Catalyst SD-WAN Manager 20.13.1 No fix stated
Cisco Catalyst SD-WAN Manager 20.12 20.12.1 → 20.12.6.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Catalyst SD-WAN Manager

The 46 CVEs of Cisco Catalyst SD-WAN Manager →
CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability 9.8 Critical CVE-2026-20313 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 7.7 High CVE-2026-20312 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 8.8 High CVE-2026-20310 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 9.1 Critical
Track this CVE