Unscored severity · published Sep 21, 2011
CVE-2011-3290
Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Identity Services Engine · Cisco
All versions, or not specified · source: NVD
IS
Identity Services Engine Software · Cisco
through 1.0.4; 1.0; 1.0mr · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3290
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3290
secunia.com
http://secunia.com/advisories/46061
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95105.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/49703
www.securitytracker.com
http://www.securitytracker.com/id?1026075
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/69945
More from Identity Services Engine
10.0
CVE-2026-76460
Cisco Identity Services Engine Authentication Bypass Vulnerability
10.0
CVE-2025-20337
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
10.0
CVE-2025-20281
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
10.0
CVE-2026-20130
Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities
10.0
CVE-2026-20192
Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities