Cross-Site Scripting Vulnerability in Cisco Identity Services Engine

CVE-2025-20204

What is CVE-2025-20204?

A vulnerability exists in the web-based management interface of Cisco Identity Services Engine (ISE) allowing authenticated attackers to inject malicious code. This flaw arises from improper validation of user input, enabling attackers to execute arbitrary scripts within the interface and potentially access sensitive information stored in the user's browser session. Successful exploitation requires valid administrative credentials, making it crucial for users to assess and secure their configurations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References