CVE-2025-20304

{"id": "CVE-2025-20304", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-20304", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-05T20:19:56.586902Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Identity Services Engine Software", "versions": [{"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.1.0 p1"}, {"status": "affected", "version": "3.1.0 p3"}, {"status": "affected", "version": "3.1.0 p2"}, {"status": "affected", "version": "3.1.0 p4"}, {"status": "affected", "version": "3.1.0 p5"}, {"status": "affected", "version": "3.1.0 p6"}, {"status": "affected", "version": "3.1.0 p7"}, {"status": "affected", "version": "3.1.0 p8"}, {"status": "affected", "version": "3.1.0 p9"}, {"status": "affected", "version": "3.1.0 p10"}, {"status": "affected", "version": "3.2.0"}, {"status": "affected", "version": "3.2.0 p1"}, {"status": "affected", "version": "3.2.0 p2"}, {"status": "affected", "version": "3.2.0 p3"}, {"status": "affected", "version": "3.2.0 p4"}, {"status": "affected", "version": "3.2.0 p5"}, {"status": "affected", "version": "3.2.0 p6"}, {"status": "affected", "version": "3.2.0 p7"}, {"status": "affected", "version": "3.3.0"}, {"status": "affected", "version": "3.3 Patch 2"}, {"status": "affected", "version": "3.3 Patch 1"}, {"status": "affected", "version": "3.3 Patch 3"}, {"status": "affected", "version": "3.3 Patch 4"}, {"status": "affected", "version": "3.3 Patch 5"}, {"status": "affected", "version": "3.3 Patch 6"}, {"status": "affected", "version": "3.3 Patch 7"}, {"status": "affected", "version": "3.4.0"}, {"status": "affected", "version": "3.4 Patch 1"}, {"status": "affected", "version": "3.4 Patch 2"}, {"status": "affected", "version": "3.4 Patch 3"}]}]}], "published": "2025-11-05T17:15:36.957", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multiple-vulns-O9BESWJH", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface.\r\n\r These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit these vulnerabilities by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, the attacker must have at least a low-privileged account on the affected device."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades en la interfaz de gesti\u00f3n basada en web de Cisco ISE y Cisco ISE-PIC podr\u00edan permitir a un atacante autenticado y remoto realizar un ataque de XSS Reflejado contra un usuario de la interfaz. Estas vulnerabilidades se deben a una validaci\u00f3n insuficiente de la entrada proporcionada por el usuario por parte de la interfaz de gesti\u00f3n basada en web de un sistema afectado. Un atacante podr\u00eda explotar estas vulnerabilidades inyectando c\u00f3digo malicioso en p\u00e1ginas espec\u00edficas de la interfaz. Un exploit exitoso podr\u00eda permitir al atacante ejecutar c\u00f3digo de script arbitrario en el contexto de la interfaz afectada o acceder a informaci\u00f3n sensible basada en el navegador. Para explotar estas vulnerabilidades, el atacante debe tener al menos una cuenta con privilegios bajos en el dispositivo afectado."}], "lastModified": "2026-10-18T21:10:00.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A219182D-3C7A-4DFE-B716-3F77705C3D00", "versionEndIncluding": "3.1.0"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7932D5D5-83E1-4BEF-845A-D0783D4BB750"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B818846-4A6E-4256-B344-281E8C786C43"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A44858A2-922A-425A-8B38-0C47DB911A3C"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53484A32-757B-42F8-B655-554C34222060"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0CCAC61F-C273-49B3-A631-31D3AE3EB148"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B452B4F0-8510-475E-9AE8-B48FABB4D7D3"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5733512D-12B5-4098-AF90-9D68217FAC27"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF8B81A6-BF44-4E5F-B167-39F61DDCA026"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56E0F0EC-3E66-4866-89F5-89B331F3F517"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E3E8937-2859-4A2A-91C0-05F674EF0466"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4B14684-EB9E-405B-85FA-B62E57CB292C"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D23905E0-E525-49B1-8E5F-4EB42D186768"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74509498-38EF-4345-9583-CEF5C26CA1D8"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD05FF93-7B8C-4283-9DB7-E03FE98FAADF"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F9B6A8E-E773-44A3-9266-878F0C58EB41"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}