CVE-2025-20337CRITICAL 10.0CISA KEVEPSS p99.2%

CVE-2025-20337Cisco Identity Services Engine Injection Vulnerability

Cisco / Identity Services Engine

Description

Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.

Scoring

CVSS 3.110.0 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS65.10% probability of exploitation · percentile 99.2% · 2026-06-18T12:00:27Z
Published2025-07-16
Last modified2025-10-28

CISA KEV entry

Added to KEV: 2025-07-28

Underlying weaknesses· 1

CWE-74

References

  1. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6
  2. https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20337

1

TypeTargetConfidenceTier
WeaknessImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')cwe-740%live

(incoming)1

TypeTargetConfidenceTier
KEVEntryCisco Identity Services Engine Injection Vulnerabilitykev-cve-2025-203370%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-20180
CVE
CVE-2025-20282
CVE
CVE-2026-20186
CVE
CVE-2026-20147
CVE
CVE-2025-20334
CVE
CVE-2025-20286
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.