Cisco Identity Services Engine Injection Vulnerability

🗓️ 28 Jul 2025 00:00:00Reported by CISAType

cisa_kev

cisa_kev🔗 www.cisa.gov👁 25 Views

Cisco Identity Services Engine has an injection vulnerability in an API allowing remote code execution.

Reporter	Title	Published	Views	Family All 22
BDU FSTEC	The vulnerability of the application software interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), a virtual device for collecting user authentication data, allows a perpetrator to execute arbitrary code with root privileges.	17 Jul 202500:00	–	bdu_fstec
Circl	CVE-2025-20337	26 Jun 202504:00	–	circl
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	28 Jul 202512:00	–	cisa
Cisco	Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities	25 Jun 202516:00	–	cisco
Tenable Nessus	Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-unauth-rce-ZAd2GnJ6)	16 Jul 202500:00	–	nessus
CNNVD	Cisco ISE和Cisco ISE-PIC 注入漏洞	16 Jul 202500:00	–	cnnvd
CNVD	Cisco ISE and ISE-PIC Injection Vulnerabilities (CNVD-2025-17186)	18 Jul 202500:00	–	cnvd
CVE	CVE-2025-20337	16 Jul 202516:17	–	cve
Cvelist	CVE-2025-20337 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability	16 Jul 202516:17	–	cvelist
EUVD	EUVD-2025-21708	3 Oct 202520:07	–	euvd

28 Jul 2025 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.110

EPSS0.65098

SSVC

cisco identity services engine injection vulnerability remote code execution user input validation api request