CNNVD-202508-606 Information

CNNVD ID

CNNVD-202508-606

CVE-2025-20332

  • CNNVD Published: 2025-08-06

Description (Chinese)

Cisco ISE是美国思科(Cisco)公司的一个 NAC 解决方案。用于管理零信任架构中的端点、用户和设备对网络资源的访问。 Cisco ISE存在安全漏洞,该漏洞源于服务器端未验证管理员权限,可能导致配置修改。

Description (English)

Cisco ISE is a NAC solution for Cisco. To manage endpoints, users and equipment access to network resources in the zero confidence architecture. Cisco ISE has a security loophole, which results from server-end failure to verify administrator privileges, which may lead to configuration modifications.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

思科

Published

2025-08-06

Last Modified

2026-02-24

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise_xss_acc_cont-YsR4uT4U

Patch

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise_xss_acc_cont-YsR4uT4U

Share on: