Threats tagged 'ghsa-9f26-h7x7-2mc5'

CVE-2025-20355 is a medium severity vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance. It allows an unauthenticated remote attacker to redirect users to malicious web pages by exploiting improper input validation of HTTP request parameters. The attacker can intercept and modify HTTP requests to achieve this redirection. No known exploits are reported in the wild, and no affected versions or patches have been specified.