VDB

CVE-2025-20131

CVE-2025-20131 PUBLISHED CVSS 4.900000095367432 MEDIUM

A vulnerability in the GUI of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of the file copy function. An attacker could exploit this vulnerability by sending a crafted file upload via the ISE GUI. A successful exploit could allow the attacker to upload arbitrary files to an affected system.

EPSS 0.05% · 17.5th percentile

Risk Scores

CVSS 3.1
4.900000095367432
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.05%
17.5th percentile

Affected Products

VendorProductVersions
CiscoCisco Identity Services Engine Software3.1.0, 3.1.0 p1, 3.1.0 p3

Exploit Intelligence

Timeline

  • Oct 10, 2024 CVE ID Reserved
  • Aug 20, 2025 Coalition ESS Score
  • Aug 20, 2025 Coalition ESS Score
  • Aug 20, 2025 CVE Published
  • Aug 20, 2025 CVE Updated
  • Aug 21, 2025 EPSS Score
  • Aug 22, 2025 Coalition ESS Score
  • Aug 26, 2025 Coalition ESS Score
  • Aug 29, 2025 EPSS Score
  • Sep 6, 2025 EPSS Score
  • Sep 14, 2025 EPSS Score
  • Sep 22, 2025 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›