Skip to content
fr Sign in
6.4 Medium

CVE-2024-20475 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage,…

Description

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious data into a specific data field in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface.

Affected products and versions

Product Affected versions Fixed in
Cisco Catalyst SD-WAN Manager 20.14.1 No fix stated
Cisco Catalyst SD-WAN Manager 20.13.1 No fix stated
Cisco Catalyst SD-WAN Manager 20.12 20.12.1 → 20.12.4 No fix stated
Cisco Catalyst SD-WAN Manager 20.11 20.11.1 → 20.11.1.2 No fix stated
Cisco Catalyst SD-WAN Manager 20.10 20.10.1 → 20.10.1.2 No fix stated
Cisco Catalyst SD-WAN Manager 20.9 20.9.2.2 → 20.9.5.1 No fix stated
Cisco Catalyst SD-WAN Manager 20.8.1 No fix stated
Cisco Catalyst SD-WAN Manager 20.7 20.7.1EFT2 → 20.7.2 No fix stated
Cisco Catalyst SD-WAN Manager 20.6 20.6.0.18.3 → 20.6.7 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Catalyst SD-WAN Manager

The 46 CVEs of Cisco Catalyst SD-WAN Manager →
CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability 9.8 Critical CVE-2026-20313 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 7.7 High CVE-2026-20312 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 8.8 High CVE-2026-20310 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering… 9.1 Critical
Track this CVE