CVE-2025-20116
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Feb 26, 2025
CWE ID 79
Summary
CVE-2025-20116 is a stored XSS vulnerability affecting the web UI of Cisco APIC. This issue permits authenticated, remote attackers to inject malicious code into specific pages, potentially leading to the execution of arbitrary script or access to sensitive browser-based information. Exploitation requires valid administrative credentials and is attributed to insufficient input validation in the web UI.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cisco Application Policy Infrastructure Controller
Affected Vendors
- Cisco