Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco identity services engine 2.4 vulnerabilities and exploits

(subscribe to this query)
5.4
CVSSv3
CVE-2024-20251
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote malicious user to perform a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability exists...
Cisco Identity Services Engine 1.4\\(0.253\\)Cisco Identity Services Engine 2.0\\(0.169\\)Cisco Identity Services Engine 1.3\\(120.135\\)Cisco Identity Services Engine 2.0\\(0.222\\)Cisco Identity Services Engine 2.1\\(102.101\\)Cisco Identity Services Engine 2.1\\(0.800\\)Cisco Identity Services Engine 2.1\\(0.474\\)Cisco Identity Services Engine 1.4\\(0.181\\)Cisco Identity Services Engine 1.4\\(0.908\\)Cisco Identity Services Engine 1.2\\(1.199\\)Cisco Identity Services Engine 2.2\\(0.283\\)Cisco Identity Services Engine 2.0\\(0.147\\)Cisco Identity Services Engine 1.3\\(106.146\\)Cisco Identity Services Engine 1.3\\(0.876\\)Cisco Identity Services Engine 2.3\\(0.151\\)Cisco Identity Services Engine 2.0\\(1.130\\)Cisco Identity Services Engine 1.4\\(0.109\\)Cisco Identity Services Engine 1.3\\(0.722\\)Cisco Identity Services Engine 1.3\\(0.909\\)Cisco Identity Services Engine 1.4Cisco Identity Services Engine 2.0Cisco Identity Services Engine 2.0.1
4.7
CVSSv3
CVE-2018-15425
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote malicious user to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server.
Cisco Identity Services Engine 2.3\\(0.298\\)Cisco Identity Services Engine 2.4\\(0.357\\)Cisco Identity Services Engine 2.1\\(0.474\\)Cisco Identity Services Engine 2.1\\(0.907\\)Cisco Identity Services Engine 2.2\\(0.470\\)Cisco Identity Services Engine 2.2\\(0.909\\)Cisco Identity Services Engine 2.3\\(0.905\\)Cisco Identity Services Engine 2.4\\(0.904\\)
4.9
CVSSv3
CVE-2018-15456
A vulnerability in the Admin Portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote malicious user to view saved passwords in plain text. The vulnerability is due to the incorrect inclusion of saved passwords when loading configuration pages in the Ad...
Cisco Identity Services Engine 2.4\\(0.357\\)Cisco Identity Services Engine 2.2\\(0.470\\)Cisco Identity Services Engine 2.3\\(0.298\\)Cisco Identity Services Engine 2.4\\(100.159\\)
7.7
CVSSv3
CVE-2020-3467
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote malicious user to modify parts of the configuration on an affected device. The vulnerability is due to improper enforcement of role-based access cont...
Cisco Identity Services EngineCisco Identity Services Engine 2.4\\(0.357\\)Cisco Identity Services Engine 2.4.0.357Cisco Identity Services Engine 2.5Cisco Identity Services Engine 2.6\\(0.156\\)Cisco Identity Services Engine 2.6.0Cisco Identity Services Engine 2.6.0.156Cisco Identity Services Engine 2.7Cisco Identity Services Engine 2.7\\(0.356\\)Cisco Identity Services Engine 2.7.0.356
6.7
CVSSv3
CVE-2018-0221
A vulnerability in specific CLI commands for the Cisco Identity Services Engine (ISE) could allow an authenticated, local malicious user to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid adm...
Cisco Identity Services Engine 2.0\\(0.249\\)Cisco Identity Services Engine 2.1\\(0.474\\)Cisco Identity Services Engine 2.2\\(0.903\\)Cisco Identity Services Engine 2.4\\(0.192\\)Cisco Identity Services Engine 2.2\\(0.470\\)Cisco Identity Services Engine 2.3\\(0.298\\)
5.4
CVSSv3
CVE-2019-12638
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote malicious user to conduct cross-site scripting (XSS) attacks against a user of the web-based management interface. The vulnerability is due to insuff...
Cisco Identity Services Engine 2.7\\(0.999\\)Cisco Identity Services Engine 2.3Cisco Identity Services Engine 2.4Cisco Identity Services Engine 2.3\\(0.298\\)Cisco Identity Services Engine 2.4\\(0.357\\)Cisco Identity Services Engine 2.6\\(0.156\\)Cisco Identity Services Engine
6.5
CVSSv3
CVE-2018-0187
A vulnerability in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote malicious user to obtain confidential information for privileged accounts. The vulnerability is due to the improper handling of confidential information. An attacker c...
Cisco Identity Services Engine 2.4\\(0.901\\)Cisco Identity Services Engine 2.4\\(0.901.1\\)
6.1
CVSSv3
CVE-2018-15455
A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated, remote malicious user to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of requests stored in the system's logging database. ...
Cisco Identity Services Engine 2.2\\(0.910\\)Cisco Identity Services Engine 2.3\\(0.905\\)Cisco Identity Services Engine 2.4\\(0.903\\)
4.4
CVSSv3
CVE-2018-0211
A vulnerability in specific CLI commands for the Cisco Identity Services Engine could allow an authenticated, local malicious user to cause a denial of service (DoS) condition. The device may need to be manually rebooted to recover. The vulnerability is due to lack of proper inpu...
Cisco Identity Services Engine 2.1\\(0.474\\)Cisco Identity Services Engine 2.2\\(1.145\\)Cisco Identity Services Engine 2.4\\(0.247\\)
8.8
CVSSv3
CVE-2018-0413
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote malicious user to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due ...
Cisco Identity Services Engine Software 2.4\\(0.183\\)Cisco Identity Services Engine Software 2.2\\(0.231\\)Cisco Identity Services Engine Software 2.0\\(0.901\\)Cisco Identity Services Engine Software 2.1\\(0.188\\)
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook