{ "document" : { "aggregate_severity" : { "text" : "mittel" }, "category" : "csaf_base", "csaf_version" : "2.0", "distribution" : { "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "de-DE", "notes" : [ { "category" : "legal_disclaimer", "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen." }, { "category" : "description", "text" : "Cisco Catalyst SD-WAN ist eine Netzwerklösung, die Software-definierte Wide-Area-Networking-Funktionen (SD-WAN) mit Cisco Catalyst Series Switches kombiniert, um die Netzwerkleistung an verteilten Standorten zu optimieren und zu sichern.", "title" : "Produktbeschreibung" }, { "category" : "summary", "text" : "Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Catalyst SD-WAN Manager ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.", "title" : "Angriff" }, { "category" : "general", "text" : "- CISCO Appliance", "title" : "Betroffene Betriebssysteme" } ], "publisher" : { "category" : "other", "contact_details" : "csaf-provider@cert-bund.de", "name" : "Bundesamt für Sicherheit in der Informationstechnik", "namespace" : "https://www.bsi.bund.de" }, "references" : [ { "category" : "self", "summary" : "WID-SEC-W-2026-0872 - CSAF Version", "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0872.json" }, { "category" : "self", "summary" : "WID-SEC-2026-0872 - Portal Version", "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0872" }, { "category" : "external", "summary" : "Cisco Security Advisory cisco-sa-vmanage-xss-ZqkhP9W9 vom 2026-03-25", "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-xss-ZqkhP9W9" } ], "source_lang" : "en-US", "title" : "Cisco Catalyst SD-WAN Manager: Schwachstelle ermöglicht Cross-Site Scripting", "tracking" : { "current_release_date" : "2026-03-25T23:00:00.000+00:00", "generator" : { "date" : "2026-03-26T10:51:06.317+00:00", "engine" : { "name" : "BSI-WID", "version" : "1.5.0" } }, "id" : "WID-SEC-W-2026-0872", "initial_release_date" : "2026-03-25T23:00:00.000+00:00", "revision_history" : [ { "date" : "2026-03-25T23:00:00.000+00:00", "number" : "1", "summary" : "Initiale Fassung" } ], "status" : "final", "version" : "1" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_version_range", "name" : "<20.12.5.3", "product" : { "name" : "Cisco Catalyst SD-WAN Manager <20.12.5.3", "product_id" : "T051205" } }, { "category" : "product_version", "name" : "20.12.5.3", "product" : { "name" : "Cisco Catalyst SD-WAN Manager 20.12.5.3", "product_id" : "T051205-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:catalyst_sd-wan_manager:sd-wan_controller__20.12.5.3" } } }, { "category" : "product_version_range", "name" : "<20.12.6.1", "product" : { "name" : "Cisco Catalyst SD-WAN Manager <20.12.6.1", "product_id" : "T051206" } }, { "category" : "product_version", "name" : "20.12.6.1", "product" : { "name" : "Cisco Catalyst SD-WAN Manager 20.12.6.1", "product_id" : "T051206-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:catalyst_sd-wan_manager:sd-wan_controller__20.12.6.1" } } }, { "category" : "product_version_range", "name" : "<20.15.4.2", "product" : { "name" : "Cisco Catalyst SD-WAN Manager <20.15.4.2", "product_id" : "T051207" } }, { "category" : "product_version", "name" : "20.15.4.2", "product" : { "name" : "Cisco Catalyst SD-WAN Manager 20.15.4.2", "product_id" : "T051207-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:catalyst_sd-wan_manager:sd-wan_controller__20.15.4.2" } } }, { "category" : "product_version_range", "name" : "<20.18.2.1", "product" : { "name" : "Cisco Catalyst SD-WAN Manager <20.18.2.1", "product_id" : "T051208" } }, { "category" : "product_version", "name" : "20.18.2.1", "product" : { "name" : "Cisco Catalyst SD-WAN Manager 20.18.2.1", "product_id" : "T051208-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:catalyst_sd-wan_manager:sd-wan_controller__20.18.2.1" } } }, { "category" : "product_version", "name" : "20.13", "product" : { "name" : "Cisco Catalyst SD-WAN Manager 20.13", "product_id" : "T052164", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:catalyst_sd-wan_manager:20.13" } } }, { "category" : "product_version", "name" : "20.14", "product" : { "name" : "Cisco Catalyst SD-WAN Manager 20.14", "product_id" : "T052165", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:catalyst_sd-wan_manager:20.14" } } }, { "category" : "product_version_range", "name" : "<20.15.5", "product" : { "name" : "Cisco Catalyst SD-WAN Manager <20.15.5", "product_id" : "T052166" } }, { "category" : "product_version", "name" : "20.15.5", "product" : { "name" : "Cisco Catalyst SD-WAN Manager 20.15.5", "product_id" : "T052166-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:catalyst_sd-wan_manager:20.15.5" } } }, { "category" : "product_version", "name" : "20.16", "product" : { "name" : "Cisco Catalyst SD-WAN Manager 20.16", "product_id" : "T052167", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:catalyst_sd-wan_manager:20.16" } } } ], "category" : "product_name", "name" : "Catalyst SD-WAN Manager" } ], "category" : "vendor", "name" : "Cisco" } ] }, "vulnerabilities" : [ { "cve" : "CVE-2026-20108", "product_status" : { "known_affected" : [ "T052164", "T052165", "T051207", "T051206", "T051208", "T051205", "T052166", "T052167" ] }, "release_date" : "2026-03-25T23:00:00.000+00:00", "title" : "CVE-2026-20108" } ] }