Exploit for Deserialization of Untrusted Data in Cisco Identity_Services_Engine

🗓️ 12 Aug 2025 22:34:20Reported by 137fType

Cisco ISE Java deserialization RCE via authenticated POST /api/v1/admin/deserializer; CVE-2025-20124

Reporter	Title	Published	Views	Family All 21
GithubExploit	Exploit for Deserialization of Untrusted Data in Cisco Identity_Services_Engine	16 Jun 202507:44	–	githubexploit
GithubExploit	Exploit for CVE-2026-20180	21 Apr 202615:21	–	githubexploit
ATTACKERKB	CVE-2025-20124	5 Feb 202517:15	–	attackerkb
BDU FSTEC	The vulnerability of the application software interface of the Cisco Identity Services Engine (ISE) management platform, related to deficiencies in the data deserialization mechanism, allows a perpetrator to execute arbitrary commands.	6 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-20124	5 Feb 202516:21	–	circl
Cisco	Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities	5 Feb 202516:00	–	cisco
Tenable Nessus	Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities (cisco-sa-ise-multivuls-FTW9AOXF)	11 Feb 202500:00	–	nessus
CNNVD	Cisco ISE 代码问题漏洞	5 Feb 202500:00	–	cnnvd
CNVD	Cisco Identity Services Engine Code Issue Vulnerability (CNVD-2025-03531)	10 Feb 202500:00	–	cnvd
CVE	CVE-2025-20124	5 Feb 202516:12	–	cve