References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-xss-VWyDgjOU https://nvd.nist.gov/vuln/detail/CVE-2025-20240 https://www.tenable.com/plugins/nessus/272739 https://github.com/advisories/GHSA-7423-xf8w-j7hg https://dbugs.ptsecurity.com/vulnerability/PT-2025-39297 https://cve.imfht.com/detail/CVE-2025-20240 https://www.tenablecloud.cn/plugins/nessus/272739 https://vigilance.fr/vulnerability/Cisco-IOS-XE-Cross-Site-Scripting-via-Web-UI-48286
Related VulnerabilitiesCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload思科系统(中国)网络技术有限公司Cisco AP WebUI存在弱口令PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassCisco Catalyst SD-WAN身份验证绕过漏洞Cisco Catalyst SD-WAN 权限绕过漏洞(CVE-2026-20127)Cisco Asyncos 整数溢出漏洞 可导致远程代码执行PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster EnumerationCisco Any Router and Switch 默认口令漏洞Cisco IOS 缓冲区溢出漏洞PoCCVE-2024-20404: Cisco Finesse - Server-Side Request Forgery (SSRF)Atlassian Jira Software Data Center And Server 需授权 路径遍历漏洞