CVE-2025-20256

🗓️ 21 May 2025 16:19:58Reported by ciscoType

Cisco Secure Network Analytics vulnerability allows command execution with root privileges via input injection.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2025-20256	21 May 202517:15	–	attackerkb
Circl	CVE-2025-20256	21 May 202516:41	–	circl
Cisco	Cisco Secure Network Analytics Manager Privilege Escalation Vulnerability	21 May 202516:00	–	cisco
CNNVD	Cisco Secure Network Analytics Manager和Cisco Secure Network Analytics Virtual Manager 注入漏洞	21 May 202500:00	–	cnnvd
Cvelist	CVE-2025-20256 Cisco Secure Network Analytics Manager Server-Side Template Injection Vulnerability	21 May 202516:19	–	cvelist
EUVD	EUVD-2025-16019	3 Oct 202520:07	–	euvd
NVD	CVE-2025-20256	21 May 202517:15	–	nvd
OSV	CVE-2025-20256	21 May 202517:15	–	osv
Positive Technologies	PT-2025-22380 · Cisco · Cisco Secure Network Analytics Virtual Manager +1	21 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-20256	23 May 202517:23	–	redhatcve

NVD

Node

cisco secure_network_analyticsMatch7.4.1

cisco secure_network_analyticsMatch7.4.2

cisco secure_network_analyticsMatch7.5.0-

cisco secure_network_analyticsMatch7.5.1-

cisco secure_network_analyticsMatch7.5.2-

[
  {
    "vendor": "Cisco",
    "product": "Cisco Secure Network Analytics",
    "versions": [
      {
        "version": "7.4.1",
        "status": "affected"
      },
      {
        "version": "7.4.2",
        "status": "affected"
      },
      {
        "version": "7.5.0",
        "status": "affected"
      },
      {
        "version": "7.5.1",
        "status": "affected"
      },
      {
        "version": "7.5.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sna-ssti-dPuLqSmZ

01 Aug 2025 15:10Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5 - 7.2

EPSS0.00244

SSVC

CWE-74