Skip to content
OpenAdvisories
Medium WID-SEC-2025-1874 1 CVE

Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht das Hochladen beliebiger Dateien

Published Aug 20, 2025 · Updated Aug 20, 2025 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Identity Services Engine (ISE) ausnutzen, um beliebige Dateien hochzuladen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 1

  • Medium 4.9
    CVE-2025-20131

    Cisco Identity Services Engine Arbitrary File Upload Vulnerability

    A vulnerability in the GUI of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of the file copy function. …

    Cisco Cisco Identity Services Engine Software Network devices

Revision history

  1. #1

    Initiale Fassung

References