VDB
CVE-2025-20204
CVE-2025-20204
PUBLISHED
Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.
EPSS 0.06% · 19.5th percentile
Risk Scores
EPSS Score
0.06%
19.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Identity Services Engine (ISE) <3.4P1 | |
| Cisco | Cisco Identity Services Engine (ISE) <3.1P10 | |
| Cisco | Cisco Identity Services Engine (ISE) <3.2P8 | |
| Cisco | Cisco Identity Services Engine (ISE) <3.2P7 | |
| Cisco | Cisco Identity Services Engine (ISE) <3.3P4 | |
| Cisco | Cisco Identity Services Engine (ISE) <3.3P3 |
Exploit Intelligence
- CIRCL seen: CVE-2025-20204 (circl-sighting)
- CIRCL seen: CVE-2025-20204 (circl-sighting)
- CIRCL seen: CVE-2025-20204 (circl-sighting)
- CIRCL seen: CVE-2025-20204 (circl-sighting)
- cisco-sa-ise-xss-42tgsdMG (circl)
Timeline
- Feb 5, 2025 CVE Published
- Feb 5, 2025 PoC Published
- Feb 5, 2025 PoC Published
- Feb 5, 2025 PoC Published
- Feb 5, 2025 PoC Published
- Feb 6, 2025 EPSS Score
- Feb 16, 2025 Coalition ESS Score
- Feb 21, 2025 EPSS Score
- Mar 8, 2025 EPSS Score
- Mar 22, 2025 EPSS Score
- Mar 28, 2025 Coalition ESS Score
- Apr 6, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0279.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0279 advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-42tgsdMG advisory
- https://cxsecurity.com/issue/WLB-2025080009 advisory