Medium WID-SEC-2025-2498 4 CVEs

Cisco Identity Services Engine (ISE): Mehrere Schwachstellen

Published Nov 5, 2025 · Updated Nov 5, 2025 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Informationen offenzulegen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 4

Medium 5.4

CVE-2025-20303

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authentica…

Cisco Cisco Identity Services Engine Software Network devices

Nov 5, 2025
Medium 5.4

CVE-2025-20304

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authentica…

Cisco Cisco Identity Services Engine Software Network devices

Nov 5, 2025
Medium 4.8

CVE-2025-20289

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authentica…

Cisco Cisco Identity Services Engine Software Network devices

Nov 5, 2025
Medium 4.3

CVE-2025-20305

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obt…

Cisco Cisco Identity Services Engine Software Network devices

Nov 5, 2025

Revision history

2025-11-05 #1
Initiale Fassung

References

Cisco Security Advisory cisco-sa-ise-multiple-vulns-O9BESWJH vom 2025-11-05
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multiple-vulns-O9BESWJH