CVE-2025-20205
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
The web-based management interface of Cisco ISE guest portals has XSS vulnerabilities. An authenticated attacker with administrative credentials can inject malicious code into specific pages, leading to script execution or access to sensitive data.
Risk Assessment
The organization is exposed to XSS attacks that could lead to theft of admin session data or account takeover, compromising the ISE system.
Recommendation
Apply patches provided by Cisco for ISE and restrict administrative access to trusted users.
Original NVD description (English source)
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit these vulnerabilities by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, the attacker must have valid administrative credentials.