Cross-Site Scripting Vulnerability in Cisco Identity Services Engine

CVE-2025-20204

What is CVE-2025-20204?

A vulnerability exists in the web-based management interface of Cisco Identity Services Engine (ISE) allowing authenticated attackers to inject malicious code. This flaw arises from improper validation of user input, enabling attackers to execute arbitrary scripts within the interface and potentially access sensitive information stored in the user's browser session. Successful exploitation requires valid administrative credentials, making it crucial for users to assess and secure their configurations.

References