5.4
CVSSv3

CVE-2022-20965

Published: 20/01/2023 Updated: 25/01/2024
CVSS v3 Base Score: 5.4 | Impact Score: 2.5 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote malicious user to take privileges actions within the web-based management interface. This vulnerability is due to improper access control on a feature within the web-based management interface of the affected system. An attacker could exploit this vulnerability by accessing features through direct requests, bypassing checks within the application. A successful exploit could allow the malicious user to take privileged actions within the web-based management interface that should be otherwise restricted. {{value}} ["%7b%7bvalue%7d%7d"])}]]

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco identity services engine

cisco identity services engine 2.6.0

cisco identity services engine 2.7.0

cisco identity services engine 3.0.0

cisco identity services engine 3.1

cisco identity services engine 3.2

Vendor Advisories

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to inject arbitrary operating system commands, bypass security protections, and conduct cross-site scripting attacks For more information about these vulnerabilities, see the Details section of this advisory Cisco plans to release softwa ...