Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco identity services engine - vulnerabilities and exploits

(subscribe to this query)
10
CVSSv3
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
10
CVSSv3
CVE-2017-5638
The Jakarta Multipart parser in Apache Struts 2 2.3.x prior to 2.3.32 and 2.5.x prior to 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote malicious users to execute arbitrary commands via a crafted Content-Typ...
Apache Struts 2.3.5Apache Struts 2.3.28Apache Struts 2.3.20.2Apache Struts 2.3.15Apache Struts 2.3.25Apache Struts 2.3.14Apache Struts 2.3.13Apache Struts 2.3.16Apache Struts 2.3.24.2Apache Struts 2.3.17Apache Struts 2.3.24.1Apache Struts 2.3.22Apache Struts 2.3.9Apache Struts 2.3.16.3Apache Struts 2.3.23Apache Struts 2.3.6Apache Struts 2.3.24.3Apache Struts 2.3.15.2Apache Struts 2.3.29Apache Struts 2.3.14.3Apache Struts 2.3.19Apache Struts 2.3.20.1
9.8
CVSSv3
CVE-2023-50164
An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or gre...
Apache Struts
9.8
CVSSv3
CVE-2022-20733
A vulnerability in the login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote malicious user to log in without credentials and access all roles without any restrictions. This vulnerability is due to exposed sensitive Security Assertion Markup La...
Cisco Identity Services Engine 3.1
9.8
CVSSv3
CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Sd-wan Edge 9.1Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Oracle Product Lifecycle Analytics 3.6.1Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 22.1.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0
9.8
CVSSv3
CVE-2017-5641
Previous versions of Apache Flex BlazeDS (4.7.2 and previous versions) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unkno...
Apache Flex BlazedsHp Xp Command View Advanced Edition
9.8
CVSSv3
CVE-2015-7705
The rate limiting feature in NTP 4.x prior to 4.2.8p4 and 4.3.x prior to 4.3.77 allows remote malicious users to have unspecified impact via a large number of crafted requests.
Ntp NtpNtp Ntp 4.2.8Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -Citrix Xenserver 6.0.2Citrix Xenserver 6.2.0Citrix Xenserver 6.5Citrix Xenserver 7.0Siemens Tim 4r-ie FirmwareSiemens Tim 4r-ie Dnp3 Firmware
9.8
CVSSv3
CVE-2015-7853
The datalen parameter in the refclock driver in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to execute arbitrary code or cause a denial of service (crash) via a negative input value.
Ntp NtpNtp Ntp 4.2.8Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -
9.8
CVSSv3
CVE-2015-7871
Crypto-NAK packets in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to bypass authentication.
Ntp Ntp 4.2.5Ntp NtpNtp Ntp 4.2.8Debian Debian Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -
9.8
CVSSv3
CVE-2017-6747
A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote malicious user to bypass local authentication. The vulnerability is due to improper handling of authentication requests and policy assignment for externally...
Cisco Identity Services Engine 1.4\\(0.253\\)Cisco Identity Services Engine 2.0\\(1.130\\)Cisco Identity Services Engine 2.1\\(0.474\\)Cisco Identity Services Engine 1.4\\(0.109\\)Cisco Identity Services Engine 1.4\\(0.181\\)Cisco Identity Services Engine 2.1 BaseCisco Identity Services Engine 1.3\\(106.146\\)Cisco Identity Services Engine 2.0 BaseCisco Identity Services Engine 1.3\\(0.722\\)Cisco Identity Services Engine 1.4\\(0.908\\)Cisco Identity Services Engine 1.3\\(0.876\\)Cisco Identity Services Engine 2.1\\(0.800\\)Cisco Identity Services Engine 1.3\\(0.909\\)Cisco Identity Services Engine 2.0\\(0.222\\)Cisco Identity Services Engine 2.1\\(102.101\\)Cisco Identity Services Engine 2.0\\(0.147\\)Cisco Identity Services Engine 1.3\\(120.135\\)Cisco Identity Services Engine 2.0\\(0.169\\)
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook