Aller au contenu
en Se connecter
4.7 Moyenne

CVE-2025-20355 A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an…

Description

A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Digital Network Architecture Center (DNA Center) 2.3 2.3.2.1-AIRGAP-CA → 2.3.7.9.75403.10-VA Pas de correctif indiqué
Cisco Digital Network Architecture Center (DNA Center) 2.2 2.2.1.0 → 2.2.3.6 Pas de correctif indiqué
Cisco Digital Network Architecture Center (DNA Center) 2.1 2.1.1.0 → 2.1.2.8 Pas de correctif indiqué
Cisco Digital Network Architecture Center (DNA Center) 1.4.0.0 Pas de correctif indiqué
Cisco Digital Network Architecture Center (DNA Center) 1.0.0.0 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Digital Network Architecture Center (DNA Center)

Les 33 CVE de Cisco Digital Network Architecture Center (DNA Center) →
CVE-2025-20346 A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should… 4.3 Moyenne CVE-2025-20353 A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote… 6.1 Moyenne CVE-2025-20341 A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate… 8.8 Élevée CVE-2025-20349 A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute… 6.3 Moyenne
Suivre cette CVE