Cisco Security Updates – 17 July 2025

The addressed vulnerabilities could allow the attacker to perform server-side request forgery attacks, bypass security restrictions, obtain sensitive information, execute arbitrary code, and gain access to the affected systems.

Sample of addressed vulnerabilities:

1. Cisco ISE API Unauthenticated Remote Code Execution Vulnerability (CVE- 2025-20337):

• CVSS: 10
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Access

2. Cisco Identity Services Engine Authenticated Remote Code Execution and Authorization Bypass Vulnerability (CVE-2025-20283):

• CVSS: 6.5
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Bypass Security

Sample of the affected products:

• Cisco Unified Intelligence Center.
• Cisco Identity Services.
• Cisco Prime Infrastructure.
• Cisco Evolved Programmable Network Manager.