CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Aug 18, 2025

CVE-2025-20281

High

EPSS 30.4%CISA KEV

Cisco/Identity Services Engine

Description

Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.

EPSS — Exploit Probability

30.4%

Higher than 96.6% of all CVEs

Required Action

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6 ; https://nvd.nist.gov/vuln/detail/CVE-2025-20281

Risk Assessment

ELEVATED

In CISA KEV

Details

Severity: High
EPSS: 30.4%
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

Jul 28, 2025

Added to KEV

Jul 28, 2025

Remediation Due

Aug 18, 2025

Affected Product

Cisco

Identity Services Engine

View all Cisco CVEs

External Links

NVD (NIST)CVE Details MITRE CVE