CVE-2019-15253

CVE-2019-15253 is a stored cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco Digital Network Architecture (DNA) Center, affecting versions prior to 1.3.0.6 and 1.3.1.4. An authenticated, remote attacker with administrator credentials could exploit insufficient input validation by persuading a user to click a crafted link. This could lead to the execution of arbitrary script code in the context of the affected interface or access to sensitive browser-based information. Rated Medium severity with a CVSS score of 4.8, the vulnerability requires high privileges (PR:H) and user interaction (UI:R) for exploitation, with a network attack vector (AV:N) and low impact on confidentiality and integrity (C:L/I:L). While not on the KEV catalog, an ExploitDB entry (EDB-48459) confirms the existence of a persistent XSS exploit. Despite this, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.