IS
Product
Identity Services Engine Software
50
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 11Low 0
Watch
Add Identity Services Engine Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20469 | 6.7 | Sep 4 | Cisco Identity Services Engine Command Injection Vulnerability Affected: 3.2.0; 3.2.0p1; 3.2.0p2; 3.2.0p3; 3.2.0p4; 3.2.0p5; +5 more |
| CVE-2015-6317 | 6.5 | Jan 23 | Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926 Affected: 1.0.4.573; 1.0_base; 1.0_mr_base; 1.1.1; 1.1.1; 1.1.1; +34 more |
| CVE-2018-15463 | 6.1 | Jan 15 | Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities Affected: 2.4(0.357) |
| CVE-2018-15440 | 6.1 | Jan 15 | Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities Affected: 2.4(0.357) |
| CVE-2018-0339 | 6.1 | Jun 7 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 2.3(0.298); 2.4(0.126) |
| CVE-2018-0327 | 6.1 | May 17 | A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against… Affected: 2.1(0.905) |
| CVE-2018-0289 | 6.1 | May 17 | A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks Affected: 2.3(0.298); 2.4(0.223) |
| CVE-2016-9214 | 6.1 | Dec 14 | Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user… Affected: 2.0(1.130) |
| CVE-2016-1485 | 6.1 | Aug 22 | Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka… Affected: 1.3(0.876) |
| CVE-2019-15282 | 5.3 | Oct 16 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker read tcpdump files generated… Affected: before 2.4\(0.357\); 2.4(0.357); 2.4(0.357); 2.4(0.357); 2.4(0.357); 2.4(0.357); +5 more |
| CVE-2019-15281 | 4.8 | Oct 16 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a stored cross-site… Affected: before 2.4\(0.357\); 2.4(0.357); 2.4(0.357); 2.4(0.357); 2.4(0.357); 2.4(0.357); +5 more |
Showing 11