This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Cisco fixes 6 vulnerabilities

Cisco fixes 6 vulnerabilities in various products. The most severe of them can be found below, the remaining ones at [1][2][3][4]. Individual products and their fixed versions: Cisco Identity Services Engine (ISE) [1] - 3.4 Patch 2, 3.3 Patch 7 Cisco ISE Passive Identity Connector (ISE-PIC) [1] - 3.4 Patch 2, 3.3 Patch 7 Cisco Unified Intelligence Center [2][3] - 12.6(2) ES05, 12.5(1) SU ES05 Cisco Prime Infrastructure [4] - 3.10.6 Security Update 02 Cisco Evolved Programmable Network Manager (EPNM) [4] - 8.1.1, 8.0.1

Cisco Identity Services Engine - RCE (CVE-2025-20283, CVE-2025-20284)
CVSS 6.5 (Medium)

An authenticated remote attacker is, due to insufficient validation of user input in the Cisco ISE and Cisco ISE-PIC API, allowed to execute code as root in the operating system of the affected device by sending a specially crafted API request [1].

The vulnerability is present in products:

  • Cisco Identity Services Engine; >=3.3, <3.3 Patch 7; >=3.4, <3.4 Patch 2;
  • Cisco Identity Services Engine Passive Identity Connector; >=3.3, <3.3 Patch 7; >=3.4, <3.4 Patch 2

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

More information:

  • CVE-2025-20283 at cve.org, NVD
  • CVE-2025-20284 at cve.org, NVD
  • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') at cwe.mitre.org

The vulnerability was publicly disclosed 16. 7. 2025.

Cisco Unified Intelligence Center - arbitrary file upload (CVE-2025-20274)
CVSS 6.3 (Medium)

An authenticated remote attacker with the Report Designer role or higher is, via the web management interface of Cisco Unified Intelligence Center, allowed to upload arbitrary files to the system and possibly execute arbitrary commands, potentially even as root. The product is also vulnerable as part of Packaged CCE, Unified CCE and Unified CCX [2].

The vulnerability is present in products:

  • Cisco Unified Intelligence Center; >=12.5, <12.5(1) SU ES05; >=12.6, <12.6(2) ES05;
  • Cisco Unified Contact Center Express; <=12.5(1)SU3;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

More information:

The vulnerability was publicly disclosed 16. 7. 2025.

Cisco Unified Intelligence Center - SSRF (CVE-2025-20288)
CVSS 5.8 (Medium)

An unauthenticated remote attacker is, due to insufficient validation of specific HTTP requests in the web management interface of Cisco Unified Intelligence Center, allowed to carry out an SSRF attack. The product is also vulnerable as part of Packaged CCE, Unified CCE and Unified CCX [3].

The vulnerability is present in products:

  • Cisco Unified Intelligence Center; >=12.5, <12.5(1) SU ES05; >=12.6, <12.6(2) ES05;
  • Cisco Unified Contact Center Express; <=12.5(1)SU3;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

More information:

The vulnerability was publicly disclosed 16. 7. 2025.

By CESNET, z.s.p.o. Michaela Ručková on 21. 7. 2025.

CESNET, z.s.p.o. Logo