Evil-DB LogoEvil-DB
← All CVEs

CVE-2025-20284

medium · 6.5

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root. This vulnerability is due to insufficient validation of user-supplied input. An attacker with valid credentials could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, the attacker must have valid high-privileged credentials.

6.5
CVSS
17.4%
EPSS (exploit prob.)
97th
EPSS percentile
2025-07-16
Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-74

Affected products

VendorProductAffected versions
ciscoidentity_services_engine< 3.3.0
ciscoidentity_services_engine3.3.0
ciscoidentity_services_engine3.3.0
ciscoidentity_services_engine3.3.0
ciscoidentity_services_engine3.3.0
ciscoidentity_services_engine3.3.0
ciscoidentity_services_engine3.3.0
ciscoidentity_services_engine3.3.0
ciscoidentity_services_engine3.4.0
ciscoidentity_services_engine3.4.0
ciscoidentity_services_engine_passive_identity_connector< 3.3.0
ciscoidentity_services_engine_passive_identity_connector3.3.0
ciscoidentity_services_engine_passive_identity_connector3.3.0
ciscoidentity_services_engine_passive_identity_connector3.3.0
ciscoidentity_services_engine_passive_identity_connector3.3.0
ciscoidentity_services_engine_passive_identity_connector3.3.0
ciscoidentity_services_engine_passive_identity_connector3.3.0
ciscoidentity_services_engine_passive_identity_connector3.3.0
ciscoidentity_services_engine_passive_identity_connector3.4.0
ciscoidentity_services_engine_passive_identity_connector3.4.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-20284