File Upload Vulnerability in Cisco Identity Services Engine

CVE-2025-20131

What is CVE-2025-20131?

A vulnerability exists in the graphical user interface of Cisco Identity Services Engine (ISE), allowing authenticated remote attackers with administrative privileges to upload arbitrary files to the device. This issue arises from insufficient validation in the file copy function, making it possible for an attacker to exploit the system by sending a maliciously crafted file upload. If successfully executed, the attacker can compromise the integrity of the system by uploading unauthorized files.

References