Stored XSS Vulnerability in Cisco ISE Management Interface

CVE-2025-20331

What is CVE-2025-20331?

A vulnerability exists in the web-based management interface of Cisco ISE and Cisco ISE-PIC, allowing authenticated remote attackers to perform stored XSS attacks. The flaw arises from inadequate validation of user-supplied input, enabling the injection of malicious scripts into specific interface pages. If successfully exploited, the attacker can run arbitrary scripts in the interface's context or access sensitive browser information. To trigger this vulnerability, at least a low-privileged account on the device is necessary.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References