[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYG_8vgpxYs1FxICZDqsV-vys2sIGDz8MXOc83Pku-ck":3,"g5a-risk:CVE-2025-20125":189},{"success":4,"data":5,"meta":186},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":29,"epssTimeSeries":40,"severity":42,"affectedProducts":43,"affectedProductsCount":58,"references":59,"referencesCount":65,"weaknesses":66,"weaknessesCount":81,"isActivelyExploited":82,"cisaInfo":29,"otxData":29,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":177,"notableEvents":178},"CVE-2025-20125","What is CVE-2025-20125?","A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node.\r\n\r\nThis vulnerability is due to a lack of authorization in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to attacker to obtain information, modify system configuration, and reload the device.\r\nNote: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time.","A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change...","2025-02-05T17:15:22.61","2025-03-28T13:37:16.65",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":29,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"psirt@cisco.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":26,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:H","NETWORK","LOW","NONE","CHANGED","HIGH",9.1,"CRITICAL",null,3.1,5.3,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":37,"ImpactScore":38},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":26,"UserInteraction":24,"Scope":36,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":26,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"UNCHANGED",1.2,5.9,0.14982,[41,41,41,41,39,39,39],0.145,"High",[44,49,52,55],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"cisco","identity_services_engine","*","cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"3.1.0","cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*",{"vendor":45,"product":46,"version":53,"criteria":54,"vulnerable":4},"3.2.0","cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*",{"vendor":45,"product":46,"version":56,"criteria":57,"vulnerable":4},"3.3.0","cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*",4,[60],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-ise-multivuls-FTW9AOXF","Cisco",[64],"Vendor Advisory",1,[67,75],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-285","Improper Authorization","The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are not applied consistently - or not at all - users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Draft","Class","Simple",{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":73,"structure":74},"CWE-862","Missing Authorization","The product does not perform an authorization check when an actor attempts to access a resource or perform an action.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are not applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Incomplete",2,false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2025-20125? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2025-20125, a high severity cyber security vulnerability from 2025. A vulnerability in an API of Cisco ISE could allow an authe...","CVE-2025-20125, CVE-2025-20125 vulnerability, CVE-2025-20125 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, cisco security, identity_services_engine vulnerability","\u002Fwhat-is\u002Fcve-2025-20125",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2025-20125","Cybersecurity","CVE-2025-20125, CVE-2025-20125 vulnerability, CVE-2025-20125 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":29,"Negate":29,"Nodes":111},[112],{"Operator":113,"Negate":29,"CPEMatch":114},"OR",[115,117,119,122,125,128,131,134,137,140,143,146,148,151,154,157,160,163,166,168,171,174],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":116,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":20,"VersionEndIncluding":29},"742B3761-9FD6-4E67-BDDD-D4DD2C3111D2",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":118,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"7A789B44-7E6C-4FE9-BD40-702A871AB8AC",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":121,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*","93920663-445E-4456-A905-81CEC6CA1833",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":124,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*","33DA5BB8-4CFE-44BD-9CEB-BC26577E8477",{"Vulnerable":4,"Criteria":126,"MatchCriteriaID":127,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*","D3AEFA85-66B5-4145-A4AD-96D1FF86B46D",{"Vulnerable":4,"Criteria":129,"MatchCriteriaID":130,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*","7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC",{"Vulnerable":4,"Criteria":132,"MatchCriteriaID":133,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*","E939B65A-7912-4C36-8799-03A1526D7BD3",{"Vulnerable":4,"Criteria":135,"MatchCriteriaID":136,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*","833B438F-0869-4C0D-9952-750C00702E8D",{"Vulnerable":4,"Criteria":138,"MatchCriteriaID":139,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*","E8B2588D-01F9-450B-B2E3-ADC4125E354E",{"Vulnerable":4,"Criteria":141,"MatchCriteriaID":142,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*","E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":145,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*","654E946A-07C5-4036-BC54-85EF42B808DD",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":147,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"7932D5D5-83E1-4BEF-845A-D0783D4BB750",{"Vulnerable":4,"Criteria":149,"MatchCriteriaID":150,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*","1B818846-4A6E-4256-B344-281E8C786C43",{"Vulnerable":4,"Criteria":152,"MatchCriteriaID":153,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*","A44858A2-922A-425A-8B38-0C47DB911A3C",{"Vulnerable":4,"Criteria":155,"MatchCriteriaID":156,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*","53484A32-757B-42F8-B655-554C34222060",{"Vulnerable":4,"Criteria":158,"MatchCriteriaID":159,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*","0CCAC61F-C273-49B3-A631-31D3AE3EB148",{"Vulnerable":4,"Criteria":161,"MatchCriteriaID":162,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*","51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD",{"Vulnerable":4,"Criteria":164,"MatchCriteriaID":165,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*","B452B4F0-8510-475E-9AE8-B48FABB4D7D3",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":167,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"F1B9C2C1-59A4-49A0-9B74-83CCB063E55D",{"Vulnerable":4,"Criteria":169,"MatchCriteriaID":170,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*","DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0",{"Vulnerable":4,"Criteria":172,"MatchCriteriaID":173,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*","E6C94CC4-CC08-4DAF-A606-FDAFC92720A9",{"Vulnerable":4,"Criteria":175,"MatchCriteriaID":176,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*","BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4",[],[179],{"id":180,"eventType":181,"eventTime":182,"details":183,"label":184,"color":185},"b70fd90c-46a4-439a-8b6d-c02c580f4838","HIGH_EPSS_DELTA","2026-06-16T04:04:22.307242+00:00","Daily EPSS score increased by 0.124 on 2025-02-07","EPSS Score Increased","red",{"lastModified":11,"cacheTime":187,"version":188},1793213885146,"2.0",{"score":190,"band":191,"action":192,"scoredAt":193},55,"Medium","Plan remediation","2026-07-01T10:35:12.618994+00:00"]