CVE-2025-20341

CVE-2025-20341 is a vulnerability in the Cisco Catalyst Center Virtual Appliance that could allow a remote attacker with valid credentials to escalate privileges to Administrator. The vulnerability exists because of insufficient validation of user-supplied input. To exploit this vulnerability, an attacker could submit a crafted HTTP request to the affected system. Successful exploitation could allow the attacker to perform unauthorized modifications to the system, including creating new user accounts or elevating their own privileges. To carry out this attack, the attacker needs to have valid credentials for a user account with at least the role of Observer.