CVE-2025-20337Vulnerability
Cisco Identity Services Engine Injection Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Cyble · last reported
Last reported 1 month ago
CISA KEVAdded 28 Jul 2025
Fix due 18 Aug 2025
Used by ransomware: not knownCISA KEV catalogue
Fix due 18 Aug 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS74.5%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
From ‘High/Medium/Low’ to Dollars: Making Cyber Risk Legible to Your CFO“Incidents involving Multer for Node.js, Microsoft SharePoint, CVE-2025-20337, and CVE-2025-5777 reinforced that concern.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2025-5777
Thanks — we review every report.