IS
Product
Identity Services Engine Passive Identity Connector
On CISA KEVExploited in the wild
31
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 9High 4Medium 18Low 0
Watch
Add Identity Services Engine Passive Identity Connector to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20136 | 6.0 | Apr 15 | Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +12 more |
| CVE-2026-20146 | 5.5 | Jul 15 | Cisco Identity Services Engine Path Traversal Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +14 more |
| CVE-2026-76447 | 5.3 | Sep 16 | Cisco Identity Services Engine Certificate Reload Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76444 | 5.3 | Sep 16 | Cisco Identity Services Engine Information Disclosure Vulnerability Affected: 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0; +1 more |
| CVE-2026-76433 | 5.3 | Sep 16 | Cisco Identity Services Engine Information Disclosure Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +14 more |
| CVE-2026-76439 | 5.3 | Sep 16 | Cisco Identity Services Engine Event Injection Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76426 | 4.9 | Sep 16 | Cisco ISE REST API SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76431 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Deletion Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76446 | 4.9 | Sep 16 | Cisco Identity Services Engine External Entity Injection Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76432 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Write Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76448 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76434 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Read Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76451 | 4.9 | Sep 16 | Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76449 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76450 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76428 | 4.9 | Sep 16 | Cisco ISE Profiler SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-20148 | 4.9 | Apr 15 | Cisco Identity Services Engine Path Traversal Vulnerability Affected: before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +33 more |
| CVE-2025-20285 | 4.1 | Jul 16 | A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured IP access restrictions and… Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +4 more |
Showing 18