Cisco Identity Services Engine (ISE): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 5.4
  CVE-2025-20331

  Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy

  A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-sup…

  Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices
  Aug 6, 2025
• Medium 4.3
  CVE-2025-20332

  Cisco Identity Services Engine Authorization Bypass Vulnerability

  A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permi…

  Cisco Cisco Identity Services Engine Software Network devices
  Aug 6, 2025

Revision history

1. 2025-08-06 #1

   Initiale Fassung

References

• Cisco Security Advisory vom 2025-08-06
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise_xss_acc_cont-YsR4uT4U