CVE-2025-20123

Summary

CVE-2025-20123 refers to multiple vulnerabilities in the web-based management interface of Cisco Crosswork Network Controller. An authenticated, remote attacker can exploit these flaws through cross-site scripting (XSS) attacks, which can execute arbitrary script code or access sensitive information. These vulnerabilities arise due to the interface's inability to properly validate user-supplied input. To exploit these issues, an attacker requires valid administrative credentials. Cisco has issued software updates that patch these vulnerabilities, and no workarounds are available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.