CVE-2025-20216
Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability
Reported by cisco · Published May 7, 2025
A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization of input to the web interface. An attacker could exploit this vulnerability by convincing an authenticated user to click a malicious link. A successful exploit could allow the attacker to inject HTML into the browser of an authenticated Cisco Catalyst SD-WAN Manager user.
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.12, 19.2.1, 18.4.4 |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3_LI, 20.9.6_LI_Images, 19.2.1 |
Timeline
- May 7, 2025 Coalition ESS Score (13 in total, the first dated here)
- May 7, 2025 CVE Published
- May 7, 2025 CVE Updated
- May 8, 2025 EPSS Score (30 in total, the first dated here)
- Apr 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2025-20216
vulnetix vdb fixes CVE-2025-20216Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-20216/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart