Cisco Catalyst SD-WAN Manager Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the web-based management interface of Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage). This vulnerability allows authenticated, remote attackers to inject malicious scripts that are stored and executed on the affected system. The issue arises from improper input sanitization in the management interface, enabling attackers to exploit the vulnerability by submitting harmful scripts.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Remediation

Cisco has released software updates to address this vulnerability. Customers are advised to upgrade to a fixed release. For guidance on upgrading, consult the Cisco Security Advisories page or contact the Cisco Technical Assistance Center (TAC) or your maintenance provider.