References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multivuls-FTW9AOXF https://nvd.nist.gov/vuln/detail/CVE-2025-20124 https://www.exploit-db.com/exploits/52396 https://www.sentinelone.com/vulnerability-database/cve-2025-20124/ https://threatprotect.qualys.com/2025/02/06/cisco-releases-fixes-for-identity-services-engine-ise-vulnerabilities-cve-2025-20124-cve-2025-20125/ https://community.cisco.com/t5/security-knowledge-base/cisco-ise-related-vulnerability-cve-2025-20124-e-20125/ta-p/5361590 https://github.com/Yuri08loveElaina/CVE-2025-20124_and_CVE-2025-20125
Related VulnerabilitiesPoCCVE-2024-1708: ConnectWise ScreenConnect <= 23.9.7 - Path TraversalPoCCVE-2026-56270: Flowise <= 3.0.13 - Unauthenticated OAuth Configuration DisclosurePoCCVE-2025-71324: Flowise - Path TraversalPoCCVE-2026-25231: FileRise <= 3.3.0 - Unauthenticated File ReadPoCCVE-2026-69251: Flowise < 3.1.3 - Remote Code ExecutionCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)Flowise /api/v1/chatflows 文件上传漏洞(CVE-2025-71334)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File UploadPoCCVE-2025-71334: Flowise - Path TraversalPoCCVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCEFlowiseAI Flowise /api/v1/node-custom-function 代码执行漏洞(CVE-2026-46442)PoCCVE-2024-36420: Flowise 1.4.3 - Arbitrary File ReadPoCCVE-2026-20253: Splunk Enterprise & Cloud Platform - Unrestricted File Upload