Data Exposure Vulnerability in Cisco ISE Management Interface

CVE-2025-20305

What is CVE-2025-20305?

A security flaw in the web-based management interface of Cisco Identity Services Engine (ISE) could enable an authenticated remote attacker to disclose sensitive information. This vulnerability arises from inadequate data protection measures in certain files. Specifically, an attacker with read-only Administrator privileges can exploit the issue by executing actions that yield results typically restricted to high-privileged users. If successful, the attacker might view passwords and other confidential data that should remain hidden from less privileged accounts.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References