Cisco Cisco Identity Services Engine Software
198 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76426 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco ISE REST API SQL Injection Vulnerability | MEDIUM 4.9 | 0.5 % | ||
| CVE-2026-76431 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Arbitrary File Deletion Vulnerability | MEDIUM 4.9 | 1.2 % | ||
| CVE-2026-76427 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco ISE XML External Entity Injection Vulnerability | MEDIUM 4.9 | 0.5 % | ||
| CVE-2026-76447 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Certificate Reload Vulnerability | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-20287 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-20285 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Authorization Bypass Vulnerability | MEDIUM 4.3 | 0.5 % | ||
| CVE-2026-20286 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Authorization Bypass Vulnerability | MEDIUM 4.3 | 0.5 % | ||
| CVE-2026-20072 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | ISE information disclosure | MEDIUM 4.9 | 0.5 % | ||
| CVE-2026-76446 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine External Entity Injection Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-20071 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | ISE 802.1x Session Hijack Vulnerability | LOW 3.8 | 0.2 % | ||
| CVE-2026-76432 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Arbitrary File Write Vulnerability | MEDIUM 4.9 | 1.2 % | ||
| CVE-2026-20300 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine SQL Injection Vulnerability | HIGH 7.1 | 0.4 % | ||
| CVE-2026-76448 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine SQL Injection Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-76434 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Arbitrary File Read Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-76444 | 3.4.0 ; 3.4 Patch 1 ; 3.4 Patch 2 ; … | Cisco Identity Services Engine Information Disclosure Vulnerability | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-76451 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-20235 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Information Disclosure Vulnerability | MEDIUM 4.9 | 0.5 % | ||
| CVE-2026-76449 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine SQL Injection Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-76450 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine SQL Injection Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-20309 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-76428 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco ISE Profiler SQL Injection Vulnerability | MEDIUM 4.9 | 0.5 % | ||
| CVE-2026-76433 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Information Disclosure Vulnerability | MEDIUM 5.3 | 1.3 % | ||
| CVE-2026-76439 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Event Injection Vulnerability | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-20282 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Authenticated Write Vulnerability | MEDIUM 4.9 | 0.6 % | ||
| CVE-2026-20283 | 3.3.0 ; 3.3 Patch 2 ; 3.3 Patch 1 ; … | Cisco Identity Services Engine IPSec Open API Command Injection Vulnerability | MEDIUM 6.5 | 0.6 % | ||
| CVE-2026-76425 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco ISE SQL Injection Vulnerability | HIGH 7.6 | 0.4 % | ||
| CVE-2026-20284 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-76424 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco ISE Arbitrary File Access Vulnerability | HIGH 7.2 | 0.9 % | ||
| CVE-2026-20247 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Unauthenticated SQL Injection Vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2026-76460 | 3.1.0 p8 ; 3.1.0 p9 ; 3.3 Patch 2 ; … | Cisco Identity Services Engine Authentication Bypass Vulnerability | CRITICAL 10.0 | 76 % | KEV | |
| CVE-2026-20352 | 3.2.0 ; 3.2.0 p1 ; 3.2.0 p2 ; … | Cisco Identity Services Engine RADIUS Denial of Service Vulnerability | HIGH 8.6 | 0.6 % | ||
| CVE-2026-20176 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Remote Code Execution Vulnerability | CRITICAL 9.1 | 0.8 % | ||
| CVE-2026-20237 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-76423 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco ISE API Authentication Bypass Vulnerability | CRITICAL 10.0 | 0.6 % | ||
| CVE-2026-20130 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities | CRITICAL 10.0 | 0.5 % | ||
| CVE-2026-20192 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities | CRITICAL 10.0 | 0.5 % | ||
| CVE-2026-20194 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-20211 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Remote Code Execution Vulnerability | CRITICAL 9.1 | 0.8 % | ||
| CVE-2026-20234 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-20307 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Remote Code Execution Vulnerability | CRITICAL 9.9 | 1.0 % | ||
| CVE-2026-20305 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Command Injection Vulnerability | CRITICAL 9.1 | 1.6 % | ||
| CVE-2026-20306 | 3.4 Patch 4 ; 3.4 Patch 5 ; 3.5 Patch 3 ; … | Cisco Identity Services Engine Command Injection Vulnerability | CRITICAL 9.1 | 1.6 % | ||
| CVE-2026-20146 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Path Traversal Vulnerability | MEDIUM 5.5 | 0.5 % | ||
| CVE-2026-20190 | 3.4.0 ; 3.4 Patch 1 ; 3.4 Patch 2 ; … | Cisco Identity Services Engine Information Disclosure Vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2026-20181 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Remote Code Execution Vulnerability | CRITICAL 9.1 | 8.9 % | ||
| CVE-2026-20193 | 3.3.0 ; 3.3 Patch 2 ; 3.3 Patch 1 ; … | Cisco Identity Services Engine Authentication Bypass Vulnerability | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-20195 | 3.3.0 ; 3.3 Patch 2 ; 3.3 Patch 1 ; … | Cisco Identity Services Engine Observable Response Discrepancy Vulnerability | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-20136 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability | MEDIUM 6.0 | 0.5 % | ||
| CVE-2026-20180 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability | CRITICAL 9.9 | 6.0 % | ||
| CVE-2026-20186 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability | CRITICAL 9.9 | 5.6 % | ||
| CVE-2026-20148 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Path Traversal Vulnerability | MEDIUM 4.9 | 6.5 % | ||
| CVE-2026-20147 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Remote Code Execution Vulnerability | CRITICAL 9.9 | 10 % | ||
| CVE-2026-20132 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-20047 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-20076 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-20029 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability | MEDIUM 4.9 | 6.1 % | ||
| CVE-2025-20304 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-20305 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive informa | MEDIUM 4.9 | 0.3 % | ||
| CVE-2025-20289 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-20303 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker | MEDIUM 5.4 | 3.9 % | ||
| CVE-2025-20343 | 3.4.0 ; 3.4 Patch 1 ; 3.4 Patch 2 ; … | Cisco Identity Services Engine Radius Suppression Denial of Service Vulnerability | HIGH 8.6 | 0.7 % | ||
| CVE-2025-20131 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Arbitrary File Upload Vulnerability | MEDIUM 4.9 | 0.3 % | ||
| CVE-2025-20332 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Authorization Bypass Vulnerability | MEDIUM 4.3 | 0.4 % | ||
| CVE-2025-20331 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-20337 | 3.3.0 ; 3.3 Patch 2 ; 3.3 Patch 1 ; … | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | CRITICAL 10.0 | 74 % | KEV | |
| CVE-2025-20285 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability | MEDIUM 4.1 | 0.5 % | ||
| CVE-2025-20284 | 3.3.0 ; 3.3 Patch 2 ; 3.3 Patch 1 ; … | Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability | HIGH 7.2 | 25 % | ||
| CVE-2025-20283 | 3.3.0 ; 3.3 Patch 2 ; 3.3 Patch 1 ; … | Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability | HIGH 7.2 | 13 % | ||
| CVE-2025-20282 | 3.4.0 ; 3.4 Patch 1 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | CRITICAL 10.0 | 39 % | ||
| CVE-2025-20281 | 3.3.0 ; 3.3 Patch 2 ; 3.3 Patch 1 ; … | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | CRITICAL 10.0 | 98 % | KEV | |
| CVE-2025-20264 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Authorization Bypass Vulnerability | MEDIUM 6.4 | 0.4 % | ||
| CVE-2025-20286 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | ISE on AWS Static Credential | CRITICAL 9.9 | 1.2 % | ||
| CVE-2025-20130 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Access Control Bypass Vulnerability | HIGH 7.2 | 0.6 % | ||
| CVE-2025-20267 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-20152 | 3.4.0 | ISE restart | HIGH 8.6 | 0.7 % | ||
| CVE-2025-20205 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenti | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-20204 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenti | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-20125 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability | CRITICAL 9.1 | 16 % | ||
| CVE-2025-20124 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Java Deserialization Vulnerability | CRITICAL 9.9 | 18 % | ||
| CVE-2020-3525 | N/A | Cisco Identity Services Engine Password Disclosure to an Unauthorized Actor Vulnerability | MEDIUM 4.3 | 0.6 % | ||
| CVE-2024-20539 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.3 % | ||
| CVE-2024-20538 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.3 % | ||
| CVE-2024-20537 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Authorization Bypass Vulnerability | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-20532 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability | MEDIUM 5.5 | 0.5 % | ||
| CVE-2024-20531 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine XML External Entity Injection Vulnerability | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-20530 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.3 % | ||
| CVE-2024-20529 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability | MEDIUM 5.5 | 0.5 % | ||
| CVE-2024-20528 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | Cisco Identity Services Engine Path Traversal Vulnerability | HIGH 7.2 | 0.6 % | ||
| CVE-2024-20527 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability | MEDIUM 5.5 | 0.5 % | ||
| CVE-2024-20525 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.3 % | ||
| CVE-2024-20487 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-20476 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Authorization Bypass Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2024-20515 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | Cisco Identity Services Engine Information Disclosure Vulnerability | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-20469 | 3.2.0 ; 3.2.0 p1 ; 3.2.0 p2 ; … | Cisco Identity Services Engine Command Injection Vulnerability | MEDIUM 6.7 | 1.1 % | ||
| CVE-2024-20417 | 2.7.0 ; 2.7.0 p1 ; 2.7.0 p2 ; … | Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabities | HIGH 8.1 | 0.5 % | ||
| CVE-2024-20466 | 2.7.0 ; 2.7.0 p1 ; 2.7.0 p2 ; … | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-20486 | 2.7.0 ; 2.7.0 p1 ; 2.7.0 p2 ; … | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | HIGH 8.8 | 0.3 % | ||
| CVE-2024-20479 | 2.7.0 ; 2.7.0 p1 ; 2.7.0 p2 ; … | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack ag | MEDIUM 4.8 | 0.3 % | ||
| CVE-2024-20443 | N/A | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack ag | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-20296 | 2.7.0 ; 2.7.0 p1 ; 2.7.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker | HIGH 7.2 | 0.5 % | ||
| CVE-2024-20368 | 2.7.0 ; 2.7.0 p1 ; 2.7.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacke | HIGH 8.8 | 0.3 % | ||
| CVE-2024-20332 | 3.2.0 ; 3.2.0 p1 ; 3.2.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker | MEDIUM 5.5 | 0.4 % | ||
| CVE-2024-20251 | 2.7.0 ; 2.7.0 p1 ; 2.7.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker | MEDIUM 5.4 | 0.4 % | ||
| CVE-2023-20272 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upl | HIGH 8.8 | 0.9 % | ||
| CVE-2023-20208 | 3.0.0 ; 3.0.0 p1 ; 3.0.0 p2 ; … | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack ag | MEDIUM 4.8 | 0.5 % | ||
| CVE-2023-20175 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the | HIGH 8.8 | 0.5 % | ||
| CVE-2023-20170 | N/A | A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the | MEDIUM 6.7 | 0.5 % | ||
| CVE-2023-20196 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit t | HIGH 7.2 | 0.6 % | ||
| CVE-2023-20195 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit t | HIGH 7.2 | 0.6 % | ||
| CVE-2023-20213 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in the CDP processing feature of Cisco ISE could allow an unauthenticated, adjacent attacker to cause a denial of service (D | MEDIUM 4.3 | 0.3 % | ||
| CVE-2023-20194 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operatin | MEDIUM 4.9 | 0.7 % | ||
| CVE-2023-20193 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in the Embedded Service Router (ESR) of Cisco ISE could allow an authenticated, local attacker to read, write, or delete arb | MEDIUM 6.7 | 0.2 % | ||
| CVE-2023-20243 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote atta | HIGH 8.6 | 0.9 % | ||
| CVE-2023-20111 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker | MEDIUM 6.5 | 0.7 % | ||
| CVE-2023-20228 | N/A | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote | MEDIUM 6.1 | 0.5 % | ||
| CVE-2023-20174 | n/a | Cisco Identity Services Engine XML External Entity Injection Vulnerabilities | MEDIUM 4.9 | 0.7 % | ||
| CVE-2023-20173 | n/a | Cisco Identity Services Engine XML External Entity Injection Vulnerabilities | MEDIUM 4.9 | 0.8 % | ||
| CVE-2023-20172 | n/a | Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities | MEDIUM 5.4 | 0.4 % | ||
| CVE-2023-20171 | n/a | Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-20167 | n/a | Cisco Identity Services Engine Path Traversal Vulnerabilities | MEDIUM 6.0 | 0.5 % | ||
| CVE-2023-20166 | n/a | Cisco Identity Services Engine Path Traversal Vulnerabilities | MEDIUM 6.7 | 0.2 % | ||
| CVE-2023-20164 | n/a | Cisco Identity Services Engine Command Injection Vulnerabilities | HIGH 7.2 | 1.1 % | ||
| CVE-2023-20163 | n/a | Cisco Identity Services Engine Command Injection Vulnerabilities | HIGH 7.2 | 1.1 % | ||
| CVE-2023-20106 | n/a | Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities | MEDIUM 5.4 | 0.4 % | ||
| CVE-2023-20087 | n/a | Cisco Identity Services Engine Arbitrary File Download Vulnerabilities | MEDIUM 6.5 | 0.8 % | ||
| CVE-2023-20077 | n/a | Cisco Identity Services Engine Arbitrary File Download Vulnerabilities | MEDIUM 6.5 | 0.8 % | ||
| CVE-2023-20153 | n/a | Cisco Identity Services Engine Command Injection Vulnerabilities | MEDIUM 6.7 | 0.4 % | ||
| CVE-2023-20152 | n/a | Cisco Identity Services Engine Command Injection Vulnerabilities | MEDIUM 6.7 | 0.4 % | ||
| CVE-2023-20122 | n/a | Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities | HIGH 7.8 | 0.2 % | ||
| CVE-2023-20121 | n/a | Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities | MEDIUM 6.7 | 0.2 % | ||
| CVE-2023-20030 | n/a | Cisco Identity Services Engine XML External Entity Injection Vulnerability | MEDIUM 6.0 | 0.8 % | ||
| CVE-2023-20023 | n/a | Cisco Identity Services Engine Privilege Escalation Vulnerabilities | MEDIUM 6.7 | 0.4 % | ||
| CVE-2023-20022 | n/a | Cisco Identity Services Engine Privilege Escalation Vulnerabilities | MEDIUM 6.7 | 0.4 % | ||
| CVE-2023-20021 | n/a | Cisco Identity Services Engine Privilege Escalation Vulnerabilities | MEDIUM 6.7 | 0.4 % | ||
| CVE-2023-20085 | 3.2.0 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacke | MEDIUM 6.1 | 0.7 % | ||
| CVE-2022-20967 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to con | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-20964 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inj | HIGH 8.8 | 31 % | ||
| CVE-2022-20966 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to con | MEDIUM 5.4 | 28 % | ||
| CVE-2022-20965 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to tak | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-20962 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 | A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to | HIGH 8.8 | 1.0 % | ||
| CVE-2022-20963 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-20937 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, | MEDIUM 5.3 | 0.9 % | ||
| CVE-2022-20956 | 3.1.0 ; 3.1.0 p1 ; 3.1.0 p3 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker | HIGH 8.8 | 1.4 % | ||
| CVE-2022-20961 | 2.6.0 ; 2.6.0 p1 ; 2.6.0 p2 ; … | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacke | HIGH 8.8 | 0.4 % | ||
| CVE-2022-20959 | n/a | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.9 % | ||
| CVE-2022-20822 | n/a | Cisco Identity Services Engine Unauthorized File Access Vulnerability | HIGH 8.1 | 1.4 % | ||
| CVE-2022-20914 | n/a | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability | MEDIUM 4.9 | 1.0 % | ||
| CVE-2022-20819 | n/a | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2022-20733 | n/a | Cisco Identity Services Engine Authentication Bypass Vulnerability | CRITICAL 9.8 | 1.1 % | ||
| CVE-2022-20756 | n/a | Cisco Identity Services Engine RADIUS Service Denial of Service Vulnerability | HIGH 8.6 | 1.5 % | ||
| CVE-2022-20782 | n/a | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2021-40123 | n/a | Cisco Identity Services Engine File Download Vulnerability | MEDIUM 6.5 | 0.8 % | ||
| CVE-2021-40121 | n/a | Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities | MEDIUM 6.1 | 0.5 % | ||
| CVE-2021-34738 | n/a | Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-1594 | n/a | Cisco Identity Services Engine Privilege Escalation Vulnerability | HIGH 8.1 | 1.4 % | ||
| CVE-2021-34702 | n/a | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability | MEDIUM 4.3 | 0.9 % | ||
| CVE-2021-34706 | n/a | Cisco Identity Services Engine XML External Entity Injection Vulnerability | MEDIUM 6.4 | 0.7 % | ||
| CVE-2021-34759 | n/a | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.6 % | ||
| CVE-2021-1607 | n/a | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | MEDIUM 4.8 | 0.6 % | ||
| CVE-2021-1606 | n/a | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | MEDIUM 4.8 | 0.6 % | ||
| CVE-2021-1605 | n/a | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | MEDIUM 4.8 | 0.6 % | ||
| CVE-2021-1604 | n/a | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | MEDIUM 4.8 | 0.6 % | ||
| CVE-2021-1603 | n/a | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | MEDIUM 4.8 | 0.6 % | ||
| CVE-2021-1306 | n/a | Cisco ADE-OS Local File Inclusion Vulnerability | MEDIUM 4.4 | 0.2 % | ||
| CVE-2021-1412 | n/a | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities | MEDIUM 6.5 | 1.0 % | ||
| CVE-2021-1416 | n/a | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities | MEDIUM 6.5 | 0.9 % | ||
| CVE-2020-3551 | n/a | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.8 % | ||
| CVE-2020-27122 | n/a | Cisco Identity Services Engine Privilege Escalation Vulnerability | MEDIUM 6.7 | 0.3 % | ||
| CVE-2020-26083 | n/a | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.6 % | ||
| CVE-2020-3589 | n/a | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.6 % | ||
| CVE-2020-3467 | n/a | Cisco Identity Services Engine Authorization Bypass Vulnerability | HIGH 7.7 | 0.9 % | ||
| CVE-2019-1736 | n/a | Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability | MEDIUM 6.6 | 0.2 % | ||
| CVE-2020-3340 | n/a | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities | MEDIUM 4.8 | 0.6 % | ||
| CVE-2020-3353 | n/a | Cisco Identity Services Engine Denial of Service Vulnerability | MEDIUM 5.9 | 0.8 % | ||
| CVE-2020-3157 | unspecified – < n/a | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 5.4 | 0.6 % | ||
| CVE-2020-3156 | unspecified – < n/a | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 1.1 % | ||
| CVE-2020-3149 | unspecified – < 2.7.0 | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.6 % | ||
| CVE-2019-15255 | unspecified – < n/a | Cisco Identity Services Engine Authorization Bypass Vulnerability | MEDIUM 6.5 | 1.1 % | ||
| CVE-2019-15282 | unspecified – < n/a | Cisco Identity Services Engine Information Disclosure Vulnerability | MEDIUM 5.3 | 1.2 % | ||
| CVE-2019-15281 | unspecified – < n/a | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.6 % | ||
| CVE-2019-12638 | unspecified – < n/a | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-12637 | unspecified – < n/a | Cisco Identity Services Engine Multiple Stored Cross-Site Scripting Vulnerabilities | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-12631 | unspecified – < n/a | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 1.1 % | ||
| CVE-2019-12644 | unspecified – < 2.6.0 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 1.1 % | ||
| CVE-2019-1941 | unspecified – < 2.6.0 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 1.3 % | ||
| CVE-2019-1942 | unspecified – < 2.6.0 | Cisco Identity Services Engine Blind SQL Injection Vulnerability | MEDIUM 6.5 | 1.2 % | ||
| CVE-2019-1851 | unspecified – < n/a | Cisco Identity Services Engine Arbitrary Client Certificate Creation Vulnerability | MEDIUM 6.8 | 1.1 % | ||
| CVE-2019-1719 | 2.1 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 0.9 % | ||
| CVE-2019-1718 | 2.1(0.907) | Cisco Identity Services Engine SSL Renegotiation Denial of Service Vulnerability | HIGH 7.5 | 2.5 % | ||
| CVE-2019-1673 | 2.5(0.353) | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | MEDIUM 5.4 | 0.8 % | ||
| CVE-2018-15459 | n/a | Cisco Identity Services Engine Privilege Escalation Vulnerability | HIGH 7.2 | 1.7 % | ||
| CVE-2018-15455 | n/a | Cisco Identity Services Engine Logging Cross-Site Scripting Vulnerability | MEDIUM 6.1 | 1.1 % | ||
| CVE-2018-0187 | n/a | Cisco Identity Services Engine Privileged Account Sensitive Information Disclosure Vulnerability | MEDIUM 6.5 | 1.5 % | ||
| CVE-2018-15463 | n/a | Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities | MEDIUM 6.1 | 1.2 % | ||
| CVE-2018-15440 | n/a | Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities | MEDIUM 6.1 | 1.3 % | ||
| CVE-2018-15456 | n/a | Cisco Identity Services Engine Password Recovery Vulnerability | MEDIUM 4.9 | 1.3 % | ||
| CVE-2018-15425 | n/a | Multiple Vulnerabilities in Cisco Identity Services Engine | MEDIUM 4.7 | 1.6 % | ||
| CVE-2018-15424 | n/a | Multiple Vulnerabilities in Cisco Identity Services Engine | MEDIUM 4.7 | 1.4 % |