CVE-2025-20282
๐๏ธย 25 Jun 2025ย 16:29:12Reported byย ciscoTypeย 
ย cve๐ย web.nvd.nist.gov๐ฐ๏ธย 11ย Media mentions๐ย 184ย Views๐ WEB
| Reporter | Title | Published | Views | Family All 32 |
|---|---|---|---|---|
 | Exploit for CVE-2026-20180 | 21 Apr 202615:21 | โ | githubexploit |
 | CVE-2025-20282 | 25 Jun 202517:15 | โ | attackerkb |
 | Cisco ISE RCE | 27 Jun 202500:00 | โ | bdu_fstec |
 | CVE-2025-20282 | 25 Jun 202516:47 | โ | circl |
 | Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities | 25 Jun 202516:00 | โ | cisco |
 | Cisco Identity Services Engine (cisco-sa-ise-unauth-rce-ZAd2GnJ6) | 25 Jun 202500:00 | โ | nessus |
 | Cisco ISE and Cisco ISE-PIC security vulnerabilities | 25 Jun 202500:00 | โ | cnnvd |
 | Cisco ISE and ISE-PIC File Upload Vulnerability | 26 Jun 202500:00 | โ | cnvd |
 | CVE-2025-20282 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | 25 Jun 202516:29 | โ | cvelist |
 | EUVD-2025-19166 | 3 Oct 202520:07 | โ | euvd |
10
Node
OR
[
{
"vendor": "Cisco",
"product": "Cisco Identity Services Engine Software",
"versions": [
{
"version": "3.4.0",
"status": "affected"
},
{
"version": "3.4 Patch 1",
"status": "affected"
}
],
"defaultStatus": "unknown"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| file | request body | /admin/files-upload/z | Unauthenticated ZIP upload to /admin/files-upload/z using a crafted zip with path traversal to write a JSP webshell into appsrv/apache-tomcat/webapps/admin/error/{shell_name}. | CWE-269 |
| zip | request body | /admin/files-upload/z | Unauthenticated ZIP upload to /admin/files-upload/z using a crafted zip with path traversal to write a JSP webshell into appsrv/apache-tomcat/webapps/admin/error/{shell_name}. | CWE-269 |
| cmd | query param | /admin/error/{shell_name} | Access the uploaded JSP webshell via /admin/error/{shell_name} and execute commands through the cmd parameter (RCE). | CWE-269 |
10
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 08:41Current
9Critical risk
Vulners AI Score9
CVSS 3.110
EPSS0.38719
SSVC