CVE-2025-20304 | Cisco Identity Services Engine Software up to 3.4.0 Web-based Management Interface cross site scripting (cisco-sa-ise-multiple-vulns-O9BESWJH)

November 5, 2025 Yanac

A vulnerability marked as problematic has been reported in Cisco Identity Services Engine Software. The affected element is an unknown function of the component Web-based Management Interface. Performing manipulation results in cross site scripting.

This vulnerability was named CVE-2025-20304. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More