Cross-Site Scripting Vulnerability in Cisco Identity Services Engine Management Interface

CVE-2025-20205

Summary

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) allows authenticated remote attackers to conduct cross-site scripting (XSS) attacks. This issue arises from inadequate validation of user-supplied input, enabling attackers to inject malicious scripts into the management interface's pages. Successful exploitation can lead to the execution of arbitrary script code in the context of the user's session or the capture of sensitive information accessed by the browser. This vulnerability requires an attacker to possess valid administrative credentials to execute an attack.

References