Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco identity services engine software 1.2 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2015-6323
The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote malicious users to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253.
Cisco Identity Services Engine Software 1.1.4Cisco Identity Services Engine Software 1.1.3Cisco Identity Services Engine Software 1.1.2Cisco Identity Services Engine Software 1.1.1Cisco Identity Services Engine Software 1.3\\(106.146\\)Cisco Identity Services Engine Software 1.3\\(0.722\\)Cisco Identity Services Engine Software 1.2.1Cisco Identity Services Engine Software 1.2\\(0.793\\)Cisco Identity Services Engine Software 1.3\\(120.135\\)Cisco Identity Services Engine Software 1.2\\(0.747\\)Cisco Identity Services Engine Software 1.2\\(1.198\\)Cisco Identity Services Engine Software 1.4\\(0.109\\)Cisco Identity Services Engine Software 1.3\\(0.876\\)Cisco Identity Services Engine Software 1.2.0.899Cisco Identity Services Engine Software 1.2 BaseCisco Identity Services Engine Software 1.1 BaseCisco Identity Services Engine Software 1.4\\(0.253\\)Cisco Identity Services Engine Software 1.2\\(1.901\\)Cisco Identity Services Engine Software 1.4\\(0.181\\)
9
CVSSv2
CVE-2013-5530
The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 prior to 1.1.0.665-5, 1.1.1 prior to 1.1.1.268-7, 1.1.2 prior to 1.1.2.145-10, 1.1.3 prior to 1.1.3.124-7, 1.1.4 prior to 1.1.4.218-7, and 1.2 prior to 1.2.0.899-2 allows remote authenticated users to execute...
Cisco Identity Services Engine Software 1.1.3Cisco Identity Services Engine Software 1.2Cisco Identity Services Engine Software 1.1Cisco Identity Services Engine Software 1.1.1Cisco Identity Services Engine Software 1.1.2Cisco Identity Services Engine Software 1.1.4Cisco Identity Services Engine Software 1.0
7.5
CVSSv2
CVE-2015-7705
The rate limiting feature in NTP 4.x prior to 4.2.8p4 and 4.3.x prior to 4.3.77 allows remote malicious users to have unspecified impact via a large number of crafted requests.
Ntp NtpNtp Ntp 4.2.8Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -Citrix Xenserver 6.0.2Citrix Xenserver 6.2.0Citrix Xenserver 6.5Citrix Xenserver 7.0Siemens Tim 4r-ie FirmwareSiemens Tim 4r-ie Dnp3 Firmware
7.5
CVSSv2
CVE-2015-7853
The datalen parameter in the refclock driver in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to execute arbitrary code or cause a denial of service (crash) via a negative input value.
Ntp NtpNtp Ntp 4.2.8Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -
7.5
CVSSv2
CVE-2015-7871
Crypto-NAK packets in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to bypass authentication.
Ntp Ntp 4.2.5Ntp NtpNtp Ntp 4.2.8Debian Debian Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -
6.8
CVSSv2
CVE-2015-6317
Cisco Identity Services Engine (ISE) prior to 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926.
Cisco Identity Services Engine Software 1.3\\(120.135\\)Cisco Identity Services Engine Software 1.3\\(106.146\\)Cisco Identity Services Engine Software 1.2.1Cisco Identity Services Engine Software 1.1.4Cisco Identity Services Engine Software 1.1.3Cisco Identity Services Engine Software 1.1.2Cisco Identity Services Engine Software 1.1.1Cisco Identity Services Engine Software 1.0.4.573Cisco Identity Services Engine Software 1.0 Mr BaseCisco Identity Services Engine Software 1.2\\(1.198\\)Cisco Identity Services Engine Software 1.4\\(0.109\\)Cisco Identity Services Engine Software 1.2\\(0.793\\)Cisco Identity Services Engine Software 1.2.0.899Cisco Identity Services Engine Software 1.2\\(0.747\\)Cisco Identity Services Engine Software 1.2 BaseCisco Identity Services Engine Software 1.1 BaseCisco Identity Services Engine Software 1.3\\(0.722\\)Cisco Identity Services Engine Software 1.2\\(1.901\\)Cisco Identity Services Engine Software 1.0 BaseCisco Identity Services Engine Software 1.4\\(0.253\\)Cisco Identity Services Engine Software 1.4\\(0.181\\)Cisco Identity Services Engine Software 1.3\\(0.876\\)
6.8
CVSSv2
CVE-2015-4267
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(0.793), 1.3(0.876), 1.4(0.109), 2.0(0.147), and 2.0(0.169) allows remote malicious users to hijack the authentication of arbitrary users, aka Bug ID CSCus09940.
Cisco Identity Services Engine Software 1.3\\(0.876\\)Cisco Identity Services Engine Software 1.4\\(0.876\\)Cisco Identity Services Engine Software 1.4\\(0.181\\)Cisco Identity Services Engine Software 2.0\\(0.147\\)Cisco Identity Services Engine Software 1.2\\(0.793\\)Cisco Identity Services Engine Software 2.0\\(0.169\\)
6.8
CVSSv2
CVE-2015-0209
Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL prior to 0.9.8zf, 1.0.0 prior to 1.0.0r, 1.0.1 prior to 1.0.1m, and 1.0.2 prior to 1.0.2a might allow remote malicious users to cause a denial of service (memory corruption and applica...
Openssl Openssl 1.0.1jOpenssl Openssl 1.0.0nOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.1hOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.0pOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.0oOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.0kOpenssl Openssl 1.0.1kOpenssl Openssl 1.0.0Openssl Openssl 1.0.1bOpenssl Openssl 1.0.1e
6.8
CVSSv2
CVE-2013-5540
The file-upload feature in Cisco Identity Services Engine (ISE) allows remote authenticated users to cause a denial of service (disk consumption and administration-interface outage) by uploading many files, aka Bug ID CSCui67519.
Cisco Identity Services Engine Software -Cisco Identity Services Engine -
6.5
CVSSv2
CVE-2015-7849
Use-after-free vulnerability in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.
Ntp NtpNtp Ntp 4.2.8Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook