Cisco Catalyst Center Software HTTP Open Redirect Vulnerability_CVE-2025-20355

4.7 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Description

A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.

Basic Information

ID CVE-2025-20355

Source cisco

Published Nov 13, 2025 at 16:18

Modified Nov 13, 2025 at 16:51

Affected Product

Vendor Cisco

Product Cisco Digital Network Architecture Center (DNA Center)

Version 1.4.0.0

Affected Versions Cisco Cisco Digital Network Architecture Center (DNA Center) 1.4.0.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.1.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.1.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.5
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.1.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.1
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.7
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.1.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.5
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.7
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.8
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.8
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1-AIRGAP-CA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.5
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.1-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.1
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.9
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.0-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3-AIRGAP-CA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-HF1
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.5
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.5-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.0-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.3-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.6.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-70045-HF1
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72328-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72323
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72328-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.6.0-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-VA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.5-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.5-VA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 1.0.0.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-VA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF70
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF51
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-70143-HF20
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF52
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF53
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF71
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-VA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF72
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-VA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-70301-GSMU10
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-75403-SMU10
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-75403-GSMU10
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9.75403.10-VA

References

sec.cloudapps.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-open-redirect-3W5Bk3Je

{
    "lastseen": "",
    "description": "A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.\r\n\r\nThis vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.",
    "published": "2025-11-13T16:18:14.450Z",
    "modified": "2025-11-13T16:51:21.740Z",
    "type": "cve",
    "title": "Cisco Catalyst Center Software HTTP Open Redirect Vulnerability",
    "source": "cisco",
    "references": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-open-redirect-3W5Bk3Je",
    "id": "CVE-2025-20355",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "Cisco Cisco Digital Network Architecture Center (DNA Center) 1.4.0.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.1.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.1.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.5\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.1.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.1\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.7\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.1.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.5\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.7\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.8\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.8\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1-AIRGAP-CA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.5\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.1-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.1\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.9\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.0-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3-AIRGAP-CA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-HF1\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.5\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.5-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.0-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.3-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.6.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-70045-HF1\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72328-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72323\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72328-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.6.0-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-VA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.5-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.5-VA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 1.0.0.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-VA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF70\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF51\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-70143-HF20\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF52\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF53\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF71\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-VA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF72\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-VA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-70301-GSMU10\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-75403-SMU10\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-75403-GSMU10\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9.75403.10-VA",
    "sourceHref": "",
    "cvss": {
        "score": 4.7,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Cisco Digital Network Architecture Center (DNA Center)",
    "version": "1.4.0.0",
    "vendor": "Cisco",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}

Description

Basic Information

Affected Product

References

💭 Join the Security Discussion ❌ Cancel Reply