CVE-2025-20240

EUVD-2025-31028
A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS) on an affected device.

 This vulnerability is due to improper sanitization of user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute a reflected XSS attack and steal user cookies from the affected device.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
ciscoCNA
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 19.55%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
ciscoios_xe
16.6.1
CNA
ciscoios_xe
16.6.2
CNA
ciscoios_xe
16.6.3
CNA
ciscoios_xe
16.6.4
CNA
ciscoios_xe
16.6.5
CNA
ciscoios_xe
16.6.4a:a
CNA
ciscoios_xe
16.6.5a:a
CNA
ciscoios_xe
16.6.6
CNA
ciscoios_xe
16.6.7
CNA
ciscoios_xe
16.6.8
CNA
ciscoios_xe
16.6.9
CNA
ciscoios_xe
16.6.10
CNA
ciscoios_xe
16.7.1
CNA
ciscoios_xe
16.7.1a:a
CNA
ciscoios_xe
16.7.1b:b
CNA
ciscoios_xe
16.7.2
CNA
ciscoios_xe
16.7.3
CNA
ciscoios_xe
16.7.4
CNA
ciscoios_xe
16.8.1
CNA
ciscoios_xe
16.8.1a:a
CNA
ciscoios_xe
16.8.1b:b
CNA
ciscoios_xe
16.8.1s:s
CNA
ciscoios_xe
16.8.1c:c
CNA
ciscoios_xe
16.8.1d:d
CNA
ciscoios_xe
16.8.2
CNA
ciscoios_xe
16.8.1e:e
CNA
ciscoios_xe
16.8.3
CNA
ciscoios_xe
16.9.1
CNA
ciscoios_xe
16.9.2
CNA
ciscoios_xe
16.9.1a:a
CNA
ciscoios_xe
16.9.1b:b
CNA
ciscoios_xe
16.9.1s:s
CNA
ciscoios_xe
16.9.3
CNA
ciscoios_xe
16.9.4
CNA
ciscoios_xe
16.9.3a:a
CNA
ciscoios_xe
16.9.5
CNA
ciscoios_xe
16.9.5f:f
CNA
ciscoios_xe
16.9.6
CNA
ciscoios_xe
16.9.7
CNA
ciscoios_xe
16.9.8
CNA
ciscoios_xe
16.10.1
CNA
ciscoios_xe
16.10.1a:a
CNA
ciscoios_xe
16.10.1b:b
CNA
ciscoios_xe
16.10.1s:s
CNA
ciscoios_xe
16.10.1c:c
CNA
ciscoios_xe
16.10.1e:e
CNA
ciscoios_xe
16.10.1d:d
CNA
ciscoios_xe
16.10.2
CNA
ciscoios_xe
16.10.1f:f
CNA
ciscoios_xe
16.10.1g:g
CNA
ciscoios_xe
16.10.3
CNA
ciscoios_xe
16.11.1
CNA
ciscoios_xe
16.11.1a:a
CNA
ciscoios_xe
16.11.1b:b
CNA
ciscoios_xe
16.11.2
CNA
ciscoios_xe
16.11.1s:s
CNA
ciscoios_xe
16.12.1
CNA
ciscoios_xe
16.12.1s:s
CNA
ciscoios_xe
16.12.1a:a
CNA
ciscoios_xe
16.12.1c:c
CNA
ciscoios_xe
16.12.1w:w
CNA
ciscoios_xe
16.12.2
CNA
ciscoios_xe
16.12.1y:y
CNA
ciscoios_xe
16.12.2a:a
CNA
ciscoios_xe
16.12.3
CNA
ciscoios_xe
16.12.8
CNA
ciscoios_xe
16.12.2s:s
CNA
ciscoios_xe
16.12.1x:x
CNA
ciscoios_xe
16.12.1t:t
CNA
ciscoios_xe
16.12.4
CNA
ciscoios_xe
16.12.3s:s
CNA
ciscoios_xe
16.12.3a:a
CNA
ciscoios_xe
16.12.4a:a
CNA
ciscoios_xe
16.12.5
CNA
ciscoios_xe
16.12.6
CNA
ciscoios_xe
16.12.1z1:z1
CNA
ciscoios_xe
16.12.5a:a
CNA
ciscoios_xe
16.12.5b:b
CNA
ciscoios_xe
16.12.1z2:z2
CNA
ciscoios_xe
16.12.6a:a
CNA
ciscoios_xe
16.12.7
CNA
ciscoios_xe
16.12.9
CNA
ciscoios_xe
16.12.10
CNA
ciscoios_xe
16.12.10a:a
CNA
ciscoios_xe
16.12.11
CNA
ciscoios_xe
16.12.12
CNA
ciscoios_xe
16.12.13
CNA
ciscoios_xe
17.1.1
CNA
ciscoios_xe
17.1.1a:a
CNA
ciscoios_xe
17.1.1s:s
CNA
ciscoios_xe
17.1.1t:t
CNA
ciscoios_xe
17.1.3
CNA
ciscoios_xe
17.2.1
CNA
ciscoios_xe
17.2.1r:r
CNA
ciscoios_xe
17.2.1a:a
CNA
ciscoios_xe
17.2.1v:v
CNA
ciscoios_xe
17.2.2
CNA
ciscoios_xe
17.2.3
CNA
ciscoios_xe
17.3.1
CNA
ciscoios_xe
17.3.2
CNA
ciscoios_xe
17.3.3
CNA
ciscoios_xe
17.3.1a:a
CNA
ciscoios_xe
17.3.1w:w
CNA
ciscoios_xe
17.3.2a:a
CNA
ciscoios_xe
17.3.1x:x
CNA
ciscoios_xe
17.3.1z:z
CNA
ciscoios_xe
17.3.4
CNA
ciscoios_xe
17.3.5
CNA
ciscoios_xe
17.3.4a:a
CNA
ciscoios_xe
17.3.6
CNA
ciscoios_xe
17.3.4b:b
CNA
ciscoios_xe
17.3.4c:c
CNA
ciscoios_xe
17.3.5a:a
CNA
ciscoios_xe
17.3.5b:b
CNA
ciscoios_xe
17.3.7
CNA
ciscoios_xe
17.3.8
CNA
ciscoios_xe
17.3.8a:a
CNA
ciscoios_xe
17.4.1
CNA
ciscoios_xe
17.4.2
CNA
ciscoios_xe
17.4.1a:a
CNA
ciscoios_xe
17.4.1b:b
CNA
ciscoios_xe
17.4.2a:a
CNA
ciscoios_xe
17.5.1
CNA
ciscoios_xe
17.5.1a:a
CNA
ciscoios_xe
17.6.1
CNA
ciscoios_xe
17.6.2
CNA
ciscoios_xe
17.6.1w:w
CNA
ciscoios_xe
17.6.1a:a
CNA
ciscoios_xe
17.6.1x:x
CNA
ciscoios_xe
17.6.3
CNA
ciscoios_xe
17.6.1y:y
CNA
ciscoios_xe
17.6.1z:z
CNA
ciscoios_xe
17.6.3a:a
CNA
ciscoios_xe
17.6.4
CNA
ciscoios_xe
17.6.1z1:z1
CNA
ciscoios_xe
17.6.5
CNA
ciscoios_xe
17.6.6
CNA
ciscoios_xe
17.6.6a:a
CNA
ciscoios_xe
17.6.5a:a
CNA
ciscoios_xe
17.6.7
CNA
ciscoios_xe
17.6.8
CNA
ciscoios_xe
17.6.8a:a
CNA
ciscoios_xe
17.7.1
CNA
ciscoios_xe
17.7.1a:a
CNA
ciscoios_xe
17.7.1b:b
CNA
ciscoios_xe
17.7.2
CNA
ciscoios_xe
17.10.1
CNA
ciscoios_xe
17.10.1a:a
CNA
ciscoios_xe
17.10.1b:b
CNA
ciscoios_xe
17.8.1
CNA
ciscoios_xe
17.8.1a:a
CNA
ciscoios_xe
17.9.1
CNA
ciscoios_xe
17.9.1w:w
CNA
ciscoios_xe
17.9.2
CNA
ciscoios_xe
17.9.1a:a
CNA
ciscoios_xe
17.9.1x:x
CNA
ciscoios_xe
17.9.1y:y
CNA
ciscoios_xe
17.9.3
CNA
ciscoios_xe
17.9.2a:a
CNA
ciscoios_xe
17.9.1x1:x1
CNA
ciscoios_xe
17.9.3a:a
CNA
ciscoios_xe
17.9.4
CNA
ciscoios_xe
17.9.1y1:y1
CNA
ciscoios_xe
17.9.5
CNA
ciscoios_xe
17.9.4a:a
CNA
ciscoios_xe
17.9.5a:a
CNA
ciscoios_xe
17.9.5b:b
CNA
ciscoios_xe
17.9.6
CNA
ciscoios_xe
17.9.6a:a
CNA
ciscoios_xe
17.9.7
CNA
ciscoios_xe
17.9.5e:e
CNA
ciscoios_xe
17.9.5f:f
CNA
ciscoios_xe
17.9.7a:a
CNA
ciscoios_xe
17.9.7b:b
CNA
ciscoios_xe
17.11.1
CNA
ciscoios_xe
17.11.1a:a
CNA
ciscoios_xe
17.12.1
CNA
ciscoios_xe
17.12.1w:w
CNA
ciscoios_xe
17.12.1a:a
CNA
ciscoios_xe
17.12.1x:x
CNA
ciscoios_xe
17.12.2
CNA
ciscoios_xe
17.12.3
CNA
ciscoios_xe
17.12.2a:a
CNA
ciscoios_xe
17.12.1y:y
CNA
ciscoios_xe
17.12.1z:z
CNA
ciscoios_xe
17.12.4
CNA
ciscoios_xe
17.12.3a:a
CNA
ciscoios_xe
17.12.1z1:z1
CNA
ciscoios_xe
17.12.1z2:z2
CNA
ciscoios_xe
17.12.4a:a
CNA
ciscoios_xe
17.12.5
CNA
ciscoios_xe
17.12.4b:b
CNA
ciscoios_xe
17.12.1z3:z3
CNA
ciscoios_xe
17.12.5a:a
CNA
ciscoios_xe
17.12.1z4:z4
CNA
ciscoios_xe
17.12.5b:b
CNA
ciscoios_xe
17.12.5c:c
CNA
ciscoios_xe
17.13.1
CNA
ciscoios_xe
17.13.1a:a
CNA
ciscoios_xe
17.14.1
CNA
ciscoios_xe
17.14.1a:a
CNA
ciscoios_xe
17.15.1
CNA
ciscoios_xe
17.15.1w:w
CNA
ciscoios_xe
17.15.1a:a
CNA
ciscoios_xe
17.15.2
CNA
ciscoios_xe
17.15.1b:b
CNA
ciscoios_xe
17.15.1x:x
CNA
ciscoios_xe
17.15.3
CNA
ciscoios_xe
17.15.2c:c
CNA
ciscoios_xe
17.15.2a:a
CNA
ciscoios_xe
17.15.1y:y
CNA
ciscoios_xe
17.15.2b:b
CNA
ciscoios_xe
17.15.3a:a
CNA
ciscoios_xe
17.15.3b:b
CNA
ciscoios_xe
17.16.1
CNA
ciscoios_xe
17.16.1a:a
CNA
Common Weakness Enumeration
References
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-xss-VWyDgjOU