Cisco Cisco ISE Passive Identity Connector
35 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76426 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco ISE REST API SQL Injection Vulnerability | MEDIUM 4.9 | 0.5 % | ||
| CVE-2026-76431 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Arbitrary File Deletion Vulnerability | MEDIUM 4.9 | 1.2 % | ||
| CVE-2026-76427 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco ISE XML External Entity Injection Vulnerability | MEDIUM 4.9 | 0.5 % | ||
| CVE-2026-76447 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Certificate Reload Vulnerability | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-20287 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-20285 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Authorization Bypass Vulnerability | MEDIUM 4.3 | 0.5 % | ||
| CVE-2026-76446 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine External Entity Injection Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-76432 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Arbitrary File Write Vulnerability | MEDIUM 4.9 | 1.2 % | ||
| CVE-2026-76448 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine SQL Injection Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-76434 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Arbitrary File Read Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-76444 | 3.4.0 ; 3.5.0 | Cisco Identity Services Engine Information Disclosure Vulnerability | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-76451 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-76449 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine SQL Injection Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-76450 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine SQL Injection Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-76428 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco ISE Profiler SQL Injection Vulnerability | MEDIUM 4.9 | 0.5 % | ||
| CVE-2026-76433 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Information Disclosure Vulnerability | MEDIUM 5.3 | 1.3 % | ||
| CVE-2026-76439 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Event Injection Vulnerability | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-76460 | 3.4.0 ; 3.5.0 | Cisco Identity Services Engine Authentication Bypass Vulnerability | CRITICAL 10.0 | 76 % | KEV | |
| CVE-2026-20237 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-76423 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco ISE API Authentication Bypass Vulnerability | CRITICAL 10.0 | 0.6 % | ||
| CVE-2026-20130 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities | CRITICAL 10.0 | 0.5 % | ||
| CVE-2026-20192 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities | CRITICAL 10.0 | 0.5 % | ||
| CVE-2026-20194 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-20234 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-20305 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Command Injection Vulnerability | CRITICAL 9.1 | 1.6 % | ||
| CVE-2026-20306 | 3.4.0 | Cisco Identity Services Engine Command Injection Vulnerability | CRITICAL 9.1 | 1.6 % | ||
| CVE-2026-20146 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Path Traversal Vulnerability | MEDIUM 5.5 | 0.5 % | ||
| CVE-2026-20190 | 3.4.0 | Cisco Identity Services Engine Information Disclosure Vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2026-20181 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Remote Code Execution Vulnerability | CRITICAL 9.1 | 8.9 % | ||
| CVE-2026-20148 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Path Traversal Vulnerability | MEDIUM 4.9 | 6.5 % | ||
| CVE-2026-20147 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco Identity Services Engine Remote Code Execution Vulnerability | CRITICAL 9.9 | 10 % | ||
| CVE-2025-20331 | 3.3.0 ; 3.4.0 | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-20337 | 3.2.0 ; 3.1.0 ; 3.3.0 ; … | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | CRITICAL 10.0 | 74 % | KEV | |
| CVE-2025-20125 | 3.0.0 ; 3.2.0 ; 3.1.0 ; … | Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability | CRITICAL 9.1 | 16 % | ||
| CVE-2025-20124 | 3.0.0 ; 3.2.0 ; 3.1.0 ; … | Cisco Identity Services Engine Java Deserialization Vulnerability | CRITICAL 9.9 | 18 % |