Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N C H H H 10.0 .6783 99.3 YES
AFFECTED Product Versions Fixed Cisco Identity Services Engine Software 3.3.0 – — Cisco ISE Passive Identity Connector 3.2.0 – —
TIMELINE Oct 10 Reserved by cisco Jul 16 Published (CNA: cisco) Jul 28 Added to CISA KEV, remediation due 2025-08-18
A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.
| Date | Event | Detail |
|---|---|---|
| October 10, 2024 | Reserved | Reserved by cisco |
| July 16, 2025 | Published | Published (CNA: cisco) |
| July 28, 2025 | KEV ADDED | Added to CISA KEV, remediation due 2025-08-18 |
Authoritative record: CVE-2025-20337 at cve.org
Vendors: cisco
Weaknesses: CWE-74
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-20337 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
