Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
identity services engine vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2022-20961
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote malicious user to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This vulnerability is due...
Cisco Identity Services Engine
Cisco Identity Services Engine 2.6.0
Cisco Identity Services Engine 2.7.0
Cisco Identity Services Engine 3.0.0
Cisco Identity Services Engine 3.1
6.5
CVSSv3
CVE-2018-0187
A vulnerability in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote malicious user to obtain confidential information for privileged accounts. The vulnerability is due to the improper handling of confidential information. An attacker c...
Cisco Identity Services Engine 2.4\\(0.901\\)
Cisco Identity Services Engine 2.4\\(0.901.1\\)
6.5
CVSSv3
CVE-2021-1412
Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote malicious user to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator privilege levels for sensitive data. An...
Cisco Identity Services Engine 2.4.0
Cisco Identity Services Engine 2.3.0
Cisco Identity Services Engine 2.6.0
Cisco Identity Services Engine 2.7.0
Cisco Identity Services Engine 3.0.0
Cisco Identity Services Engine
4.3
CVSSv3
CVE-2021-1416
Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote malicious user to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator privilege levels for sensitive data. An...
Cisco Identity Services Engine 2.4.0
Cisco Identity Services Engine 2.3.0
Cisco Identity Services Engine 2.6.0
Cisco Identity Services Engine 2.7.0
Cisco Identity Services Engine 3.0.0
Cisco Identity Services Engine
7.3
CVSSv3
CVE-2016-6453
A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote malicious user to execute arbitrary SQL commands on the database. More Information: CSCva46542. Known Affected Releases: 1.3(0.876).
Cisco Identity Services Engine 1.3\\(0.876\\)
6.1
CVSSv3
CVE-2018-0289
A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote malicious user to conduct cross-site scripting attacks. The vulnerability is due to improper validation of requests stored in logs in the application management interfac...
Cisco Identity Services Engine Software 2.3\\(0.298\\)
Cisco Identity Services Engine Software 2.4\\(0.223\\)
NA
CVE-2014-8022
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow remote malicious users to inject arbitrary web script or HTML via input to unspecified web pages, aka Bug IDs CSCur69835 and CSCur69776.
Cisco Identity Services Engine Software -
6.1
CVSSv3
CVE-2018-0339
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient i...
Cisco Identity Services Engine Software 2.3\\(0.298\\)
Cisco Identity Services Engine Software 2.4\\(0.126\\)
NA
CVE-2015-6266
The guest portal in Cisco Identity Services Engine (ISE) 3300 1.2(0.899) does not restrict access to uploaded HTML documents, which allows remote malicious users to obtain sensitive information from customized documents via a direct request, aka Bug ID CSCuo78045.
Cisco Identity Services Engine Software 1.2\\(0.899\\)
6.1
CVSSv3
CVE-2016-9214
Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvb86332 CSCvb86760. Known Aff...
Cisco Identity Services Engine Software 2.0\\(1.130\\)
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-3400
deserialization
CVE-2024-21788
CVE-2023-42433
CVE-2024-21841
CVE-2024-22095
local file inclusion
memory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »