This vulnerability in Cisco Catalyst SD-WAN Manager's web interface arises from improper neutralization of user input during web page generation, enabling an authenticated remote attacker to conduct a cross-site scripting attack. Exploitation requires user interaction (clicking a crafted link) and could result in execution of arbitrary script code in the context of the affected interface, potentially exposing sensitive information. The CVSS 3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, required privileges, and user interaction. Multiple versions from 20.12.1 through 20.18.1 are affected.

Successful exploitation allows an attacker with authenticated access to execute arbitrary scripts in the context of the web interface user, potentially leading to disclosure of sensitive browser-based information. The impact is limited to confidentiality and integrity with no availability impact. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with links received in the management interface context and limit authenticated access to trusted users only.