CVE-2025-20264 | Cisco Identity Services Engine Software up to 3.4.0 Web-based Management Interface improper authorization (cisco-sa-ise-auth-bypass-mVfKVQAU)

June 25, 2025 Yanac

A vulnerability, which was classified as critical, has been found in Cisco Identity Services Engine Software. This issue affects some unknown processing of the component Web-based Management Interface. The manipulation leads to improper authorization.

The identification of this vulnerability is CVE-2025-20264. The attack may be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More