What is CVE-2025-20259?

CVE-2025-20259 is a medium-severity vulnerability in Cisco Thousandeyes Endpoint Agent, classified under Path Traversal. CVSS score: 5.3/10. Published 2025-06-04.

How severe is CVE-2025-20259?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Path Traversal in Cisco Thousandeyes Endpoint Agent

CVE-2025-20259

Multiple vulnerabilities in the update process of Cisco ThousandEyes Endpoint Agent for Windows could allow an authenticated, local attacker to delete arbitrary files on an affected device. These vulnerabilities are due to improper acce…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.001 (3.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Cisco Thousandeyes Endpoint Agent — versions N/A
Cisco Thousandeyes_endpoint_agent
Microsoft Windows

Weakness classification (CWE)

CWE-22 — Path Traversal

References

psirt@cisco.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-20259?: CVE-2025-20259 is a medium-severity vulnerability in Cisco Thousandeyes Endpoint Agent, classified under Path Traversal. CVSS score: 5.3/10. Published 2025-06-04.
How severe is CVE-2025-20259?: Medium severity. CVSS v3 base score is 5.3 out of 10.