CVE-2025-20282
๐๏ธย 25 Jun 2025ย 16:29:12Reported byย ciscoTypeย 
ย cve๐ย web.nvd.nist.gov๐ฐ๏ธย 11ย Media mentions๐ย 123ย Views๐ WEB
| Reporter | Title | Published | Views | Family All 27 |
|---|---|---|---|---|
 | Exploit for CVE-2026-20180 | 21 Apr 202615:21 | โ | githubexploit |
 | CVE-2025-20282 | 25 Jun 202517:15 | โ | attackerkb |
 | The vulnerability of the private application programming interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute arbitrary code. | 27 Jun 202500:00 | โ | bdu_fstec |
 | CVE-2025-20282 | 25 Jun 202516:47 | โ | circl |
 | Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities | 25 Jun 202516:00 | โ | cisco |
 | Cisco Identity Services Engine (cisco-sa-ise-unauth-rce-ZAd2GnJ6) | 25 Jun 202500:00 | โ | nessus |
 | Cisco ISEๅCisco ISE-PIC ๅฎๅ จๆผๆด | 25 Jun 202500:00 | โ | cnnvd |
 | Cisco ISE and ISE-PIC File Upload Vulnerability | 26 Jun 202500:00 | โ | cnvd |
 | CVE-2025-20282 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | 25 Jun 202516:29 | โ | cvelist |
 | EUVD-2025-19166 | 3 Oct 202520:07 | โ | euvd |
10
Node
OR
[
{
"vendor": "Cisco",
"product": "Cisco Identity Services Engine Software",
"versions": [
{
"version": "3.4.0",
"status": "affected"
},
{
"version": "3.4 Patch 1",
"status": "affected"
}
],
"defaultStatus": "unknown"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| file | request body | admin/files-upload/z | Unauthenticated file upload vulnerability (ZIP with path traversal) leading to webshell deployment in webapps. | CWE-269 |
| cmd | query param | admin/error/{shell} | Accessing the deployed webshell to execute commands via the cmd parameter. | CWE-269 |
10
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 08:41Current
8.2High risk
Vulners AI Score8.2
CVSS 3.110
EPSS0.12033
SSVC