Vulnerability in Cisco Catalyst Sd-Wan Manager
CVE-2025-20216
A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization of input to the web interface. An attacker could exploit this vulnerability by convincing an authenticated user to click a malicious link. A successful exploit could allow the attacker to inject HTML into the browser of an authenticated Cisco Catalyst SD-WAN Manager user.
EPSS: 0.003 (22.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N.
Affected products
- Cisco Catalyst_sd-wan_manager — versions 17.2.4, 17.2.5, 17.2.6
- Cisco Catalyst Sd-wan Manager — versions 20.1.12, 19.2.1, 18.4.4
Weakness classification (CWE)
References
- psirt@cisco.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2025-20216?
- CVE-2025-20216 is a medium-severity vulnerability in Cisco Catalyst Sd-Wan Manager, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 4.7/10. Published 2025-05-07.
- How severe is CVE-2025-20216?
- Medium severity. CVSS v3 base score is 4.7 out of 10.