July 28, 2025 · Applied Cybernetics Group
CVE-2025-20337 — Cisco Identity Services Engine
Cisco Identity Services Engine Injection Vulnerability
- Added to KEV
2025-07-28- Federal due date
2025-08-18- Vendor
- Cisco
- Product
- Identity Services Engine
- EPSS
- 99.2th percentile (score 0.651, as of
2026-07-13) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- ATT&CK
- T1059 , T1106 · signal rollup
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2025-20337
CISA short description
Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.