CVE-2025-20356: cyber vision center through 5.2.0 (inclusive); +1 more affected products

Affected technology

cyber vision center · through 5.2.0 (inclusive)
cisco

Cisco Cyber Vision · 3.0.0, 3.0.2, 3.0.3, 3.0.1, 3.1.0, 3.0.4, 3.1.1, 3.1.2, 3.2.0, 3.0.5, 3.2.1, 3.0.6, 3.2.2, 3.2.3, 3.2.4, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.2.0, 4.2.1, 4.1.5, 4.2.2, 4.2.X, 4.2.3, 4.2.4, 4.2.6, 4.1.6, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.1.7, 5.0.0, 5.0.1, 5.0.2, 5.1.0, 5.1.1, 5.1.2, 5.1.3, 5.2.0, 5.2.1
Cisco

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · User interaction required

What an attacker can do

An authenticated, remote attacker could conduct cross-site scripting (XSS) attacks against a user of the interface. Vendor/CNA’s CVSS 3.1 assessment (base score 5.4/10) rates confidentiality and integrity impact as low; availability impact as none.