CVE-2025-20282

🗓️ 25 Jun 2025 16:29:12Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 11 Media mentions👁 148 Views

CVE-2025-20282 allows unauthenticated remote attackers to execute code on Cisco ISE devices.

Reporter	Title	Published	Views	Family All 30
GithubExploit	Exploit for CVE-2026-20180	21 Apr 202615:21	–	githubexploit
ATTACKERKB	CVE-2025-20282	25 Jun 202517:15	–	attackerkb
BDU FSTEC	The vulnerability of the private application programming interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute arbitrary code.	27 Jun 202500:00	–	bdu_fstec
Circl	CVE-2025-20282	25 Jun 202516:47	–	circl
Cisco	Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities	25 Jun 202516:00	–	cisco
Tenable Nessus	Cisco Identity Services Engine (cisco-sa-ise-unauth-rce-ZAd2GnJ6)	25 Jun 202500:00	–	nessus
CNNVD	Cisco ISE和Cisco ISE-PIC 安全漏洞	25 Jun 202500:00	–	cnnvd
CNVD	Cisco ISE and ISE-PIC File Upload Vulnerability	26 Jun 202500:00	–	cnvd
Cvelist	CVE-2025-20282 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability	25 Jun 202516:29	–	cvelist
EUVD	EUVD-2025-19166	3 Oct 202520:07	–	euvd

NVD

Vulners

Node

cisco identity_services_engineMatch3.4.0-

cisco identity_services_engineMatch3.4.0patch1

cisco identity_services_engine_passive_identity_connectorMatch3.4.0-

cisco identity_services_engine_passive_identity_connectorMatch3.4.0patch1

[
  {
    "vendor": "Cisco",
    "product": "Cisco Identity Services Engine Software",
    "versions": [
      {
        "version": "3.4.0",
        "status": "affected"
      },
      {
        "version": "3.4 Patch 1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]