CVE-2025-20303 | Cisco Identity Services Engine Software up to 3.4.0 Web-based Management Interface cross site scripting (cisco-sa-ise-multiple-vulns-O9BESWJH)

A vulnerability labeled as problematic has been found in Cisco Identity Services Engine Software. Impacted is an unknown function of the component Web-based Management Interface. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-20303. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.