CVE-2025-20355
Cisco Catalyst Center Software HTTP Open Redirect Vulnerability
Severity
Medium 4.7
CVSS 3.1
Exploited
Not listed
EPSS
0.002
15.3th percentile
Discovered by
Vendor
Published by the vendor
Published
Nov 13, 2025
Assigned by cisco
Description
A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.
Weakness: CWE-601
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Catalyst Center (DNA Center) | Network & Security Management | cna-assigner |
Vendor-reported affected versions (1)
- Cisco · Cisco Digital Network Architecture Center (DNA Center)