A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS) on an affected device.

This vulnerability is due to improper sanitization of user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute a reflected XSS attack and steal user cookies from the affected device.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00068.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Cisco Cisco IOS XE Software affected
Version Status Constraints
16.6.1 affected —
16.6.2 affected —
16.6.3 affected —
16.6.4 affected —
16.6.5 affected —
16.6.4a affected —
16.6.5a affected —
16.6.6 affected —
16.6.7 affected —
16.6.8 affected —
16.6.9 affected —
16.6.10 affected —
16.7.1 affected —
16.7.1a affected —
16.7.1b affected —
16.7.2 affected —
16.7.3 affected —
16.7.4 affected —
16.8.1 affected —
16.8.1a affected —
16.8.1b affected —
16.8.1s affected —
16.8.1c affected —
16.8.1d affected —
16.8.2 affected —
16.8.1e affected —
16.8.3 affected —
16.9.1 affected —
16.9.2 affected —
16.9.1a affected —
16.9.1b affected —
16.9.1s affected —
16.9.3 affected —
16.9.4 affected —
16.9.3a affected —
16.9.5 affected —
16.9.5f affected —
16.9.6 affected —
16.9.7 affected —
16.9.8 affected —
16.10.1 affected —
16.10.1a affected —
16.10.1b affected —
16.10.1s affected —
16.10.1c affected —
16.10.1e affected —
16.10.1d affected —
16.10.2 affected —
16.10.1f affected —
16.10.1g affected —
16.10.3 affected —
16.11.1 affected —
16.11.1a affected —
16.11.1b affected —
16.11.2 affected —
16.11.1s affected —
16.12.1 affected —
16.12.1s affected —
16.12.1a affected —
16.12.1c affected —
16.12.1w affected —
16.12.2 affected —
16.12.1y affected —
16.12.2a affected —
16.12.3 affected —
16.12.8 affected —
16.12.2s affected —
16.12.1x affected —
16.12.1t affected —
16.12.4 affected —
16.12.3s affected —
16.12.3a affected —
16.12.4a affected —
16.12.5 affected —
16.12.6 affected —
16.12.1z1 affected —
16.12.5a affected —
16.12.5b affected —
16.12.1z2 affected —
16.12.6a affected —
16.12.7 affected —
16.12.9 affected —
16.12.10 affected —
16.12.10a affected —
16.12.11 affected —
16.12.12 affected —
16.12.13 affected —
17.1.1 affected —
17.1.1a affected —
17.1.1s affected —
17.1.1t affected —
17.1.3 affected —
17.2.1 affected —
17.2.1r affected —
17.2.1a affected —
17.2.1v affected —
17.2.2 affected —
17.2.3 affected —
17.3.1 affected —
17.3.2 affected —
17.3.3 affected —
17.3.1a affected —
17.3.1w affected —
17.3.2a affected —
17.3.1x affected —
17.3.1z affected —
17.3.4 affected —
17.3.5 affected —
17.3.4a affected —
17.3.6 affected —
17.3.4b affected —
17.3.4c affected —
17.3.5a affected —
17.3.5b affected —
17.3.7 affected —
17.3.8 affected —
17.3.8a affected —
17.4.1 affected —
17.4.2 affected —
17.4.1a affected —
17.4.1b affected —
17.4.2a affected —
17.5.1 affected —
17.5.1a affected —
17.6.1 affected —
17.6.2 affected —
17.6.1w affected —
17.6.1a affected —
17.6.1x affected —
17.6.3 affected —
17.6.1y affected —
17.6.1z affected —
17.6.3a affected —
17.6.4 affected —
17.6.1z1 affected —
17.6.5 affected —
17.6.6 affected —
17.6.6a affected —
17.6.5a affected —
17.6.7 affected —
17.6.8 affected —
17.6.8a affected —
17.7.1 affected —
17.7.1a affected —
17.7.1b affected —
17.7.2 affected —
17.10.1 affected —
17.10.1a affected —
17.10.1b affected —
17.8.1 affected —
17.8.1a affected —
17.9.1 affected —
17.9.1w affected —
17.9.2 affected —
17.9.1a affected —
17.9.1x affected —
17.9.1y affected —
17.9.3 affected —
17.9.2a affected —
17.9.1x1 affected —
17.9.3a affected —
17.9.4 affected —
17.9.1y1 affected —
17.9.5 affected —
17.9.4a affected —
17.9.5a affected —
17.9.5b affected —
17.9.6 affected —
17.9.6a affected —
17.9.7 affected —
17.9.5e affected —
17.9.5f affected —
17.9.7a affected —
17.9.7b affected —
17.11.1 affected —
17.11.1a affected —
17.12.1 affected —
17.12.1w affected —
17.12.1a affected —
17.12.1x affected —
17.12.2 affected —
17.12.3 affected —
17.12.2a affected —
17.12.1y affected —
17.12.1z affected —
17.12.4 affected —
17.12.3a affected —
17.12.1z1 affected —
17.12.1z2 affected —
17.12.4a affected —
17.12.5 affected —
17.12.4b affected —
17.12.1z3 affected —
17.12.5a affected —
17.12.1z4 affected —
17.12.5b affected —
17.12.5c affected —
17.13.1 affected —
17.13.1a affected —
17.14.1 affected —
17.14.1a affected —
17.15.1 affected —
17.15.1w affected —
17.15.1a affected —
17.15.2 affected —
17.15.1b affected —
17.15.1x affected —
17.15.3 affected —
17.15.2c affected —
17.15.2a affected —
17.15.1y affected —
17.15.2b affected —
17.15.3a affected —
17.15.3b affected —
17.16.1 affected —
17.16.1a affected —

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Cisco Subscribe
Ios Xe Software Subscribe

Project Subscriptions

Vendors Products
Cisco Subscribe
Ios Xe Software Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2025-31028 A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS) on an affected device. This vulnerability is due to improper sanitization of user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute a reflected XSS attack and steal user cookies from the affected device.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-xss-VWyDgjOU cve-icon cve-icon
History

Fri, 26 Sep 2025 17:30:00 +0000

Type Values Removed Values Added
Description A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS) on an affected device. This vulnerability is due to improper sanitization of user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute a reflected XSS attack and steal user cookies from the affected device. A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS) on an affected device. This vulnerability is due to improper sanitization of user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute a reflected XSS attack and steal user cookies from the affected device.

Thu, 25 Sep 2025 08:30:00 +0000

Type Values Removed Values Added
First Time appeared Cisco
Cisco ios Xe Software
Vendors & Products Cisco
Cisco ios Xe Software

Wed, 24 Sep 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 24 Sep 2025 17:30:00 +0000

Type Values Removed Values Added
Description A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS) on an affected device. This vulnerability is due to improper sanitization of user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute a reflected XSS attack and steal user cookies from the affected device.
Weaknesses CWE-692
References
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2025-09-26T17:12:35.657Z

Reserved: 2024-10-10T19:15:13.238Z

Link: CVE-2025-20240

cve-icon Vulnrichment

Updated: 2025-09-24T17:31:09.297Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-24T18:15:34.333

Modified: 2025-09-26T18:15:35.700

Link: CVE-2025-20240

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-09-25T08:21:09Z

Weaknesses