Exploited Vulnerabilities DailyCVE-2025-20281: Cisco Identity Services Engine
EPSS97.6%No. 284 of 1739 in KEV
CVE year2025listed the same year
Same vendor in KEV100
Same product3
| Field | Value |
|---|---|
| Vendor | Cisco |
| Product | Identity Services Engine |
| Name | Cisco Identity Services Engine Injection Vulnerability |
| Added to KEV | 2025-07-28 |
| US federal due date | 2025-08-18 |
| Ransomware use | Unknown |
| CWE | CWE-74 |
CISA description
Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-76460 | Cisco Identity Services Engine | 2026-09-16 | 14.0% | Unknown |
| CVE-2025-20337 | Cisco Identity Services Engine | 2025-07-28 | 67.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Cisco Identity Services Engine vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-07-28.