CVE-2025-20355

MEDIUM

Cisco Catalyst Center Virtual Appliance - Open Redirect

Title source: llm
STIX 2.1

Description

A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.

References (1)

Scores

CVSS v3 4.7
EPSS 0.0002
EPSS Percentile 5.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-601
Status published
Products (50)
Cisco/Cisco Digital Network Architecture Center (DNA Center) 1.0.0.0
Cisco/Cisco Digital Network Architecture Center (DNA Center) 1.4.0.0
Cisco/Cisco Digital Network Architecture Center (DNA Center) 2.1.1.0
Cisco/Cisco Digital Network Architecture Center (DNA Center) 2.1.1.3
Cisco/Cisco Digital Network Architecture Center (DNA Center) 2.1.2.0
Cisco/Cisco Digital Network Architecture Center (DNA Center) 2.1.2.3
Cisco/Cisco Digital Network Architecture Center (DNA Center) 2.1.2.4
Cisco/Cisco Digital Network Architecture Center (DNA Center) 2.1.2.5
Cisco/Cisco Digital Network Architecture Center (DNA Center) 2.1.2.6
Cisco/Cisco Digital Network Architecture Center (DNA Center) 2.1.2.7
... and 40 more
Published Nov 13, 2025
Tracked Since Feb 18, 2026