IS
Product
Identity Services Engine
On CISA KEVExploited in the wild
197
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 14High 39Medium 133Low 2
Watch
Add Identity Services Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76460 In wildKEV | 10.0 | Sep 16 | Cisco Identity Services Engine Authentication Bypass Vulnerability Affected: 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +34 more |
| CVE-2025-20337 In wildKEV | 10.0 | Jul 16 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Affected: 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +3 more |
| CVE-2025-20281 In wildKEV | 10.0 | Jun 25 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Affected: 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +3 more |
| CVE-2026-20130 | 10.0 | Sep 16 | Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-20192 | 10.0 | Sep 16 | Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2025-20282 | 10.0 | Jun 25 | A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute… Affected: 3.4.0; 3.4.0 |
| CVE-2026-20234 | 9.9 | Sep 16 | Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-20180 | 9.9 | Apr 15 | Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability Affected: before 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; +15 more |
| CVE-2026-20186 | 9.9 | Apr 15 | Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability Affected: before 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; +15 more |
| CVE-2026-20147 | 9.9 | Apr 15 | Cisco Identity Services Engine Remote Code Execution Vulnerability Affected: before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +34 more |
| CVE-2025-20286 | 9.8 | Jun 4 | A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments of Cisco Identity Services Engine (ISE) could allow an… Affected: 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +34 more |
| CVE-2022-20733 | 9.8 | Jun 15 | A vulnerability in the login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to log in without credentials and access all roles… Affected: 3.1; 3.1 |
| CVE-2017-6747 | 9.8 | Aug 7 | A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass local authentication Affected: 1.3(0.722); 1.3(0.876); 1.3(0.909); 1.3(106.146); 1.3(120.135); 1.4(0.109); +12 more |
| CVE-2026-20181 | 9.1 | Jun 17 | Cisco Identity Services Engine Remote Code Execution Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +16 more |
| CVE-2024-20486 | 8.8 | Aug 21 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: 2.7.0 before 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +14 more |
| CVE-2024-20368 | 8.8 | Apr 3 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: 2.7.0 before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +11 more |
| CVE-2023-20272 | 8.8 | Nov 21 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of… Affected: 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +7 more |
| CVE-2023-20175 | 8.8 | Nov 1 | A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and… Affected: 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +29 more |
| CVE-2022-20964 | 8.8 | Jan 20 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inject arbitrary commands on the… Affected: before 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +27 more |
| CVE-2022-20962 | 8.8 | Nov 3 | A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to make unauthorized changes to the file… Affected: 3.1; 3.1; 3.1 |
| CVE-2022-20956 | 8.8 | Nov 3 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access… Affected: 3.1; 3.1; 3.1; 3.1; 3.2 |
| CVE-2022-20961 | 8.8 | Nov 3 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: before 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +23 more |
| CVE-2018-0213 | 8.8 | Mar 8 | A vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to gain elevated privileges Affected: 2.1(0.904) |
| CVE-2025-20152 | 8.6 | May 21 | A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 3.4.0 |
| CVE-2023-20243 | 8.6 | Sep 6 | A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to… Affected: 3.1; 3.1; 3.1; 3.1; 3.1; 3.1; +4 more |
| CVE-2018-0277 | 8.6 | May 17 | A vulnerability in the Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) certificate validation during EAP authentication for the Cisco Identity Services… Affected: 2.0(0.306); 2.0(1.130); 2.1(0.474); 2.2(0.470) |
| CVE-2024-20417 | 8.1 | Aug 21 | Multiple vulnerabilities in the REST API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct blind SQL injection attacks Affected: after 3.0.0 through 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2022-20822 | 8.1 | Oct 26 | Cisco Identity Services Engine Unauthorized File Access Vulnerability Affected: 3.1; 3.1; 3.1; 3.2 |
| CVE-2021-1594 | 8.1 | Oct 6 | A vulnerability in the REST API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a command injection attack and elevate… Affected: 2.4.0 before 2.6.0; 2.4(0.902); 2.6(0.156); 2.6.0; 2.6.0; 2.6.0; +18 more |
| CVE-2023-20122 | 7.8 | Apr 5 | Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could… Affected: 3.2 |
| CVE-2017-12261 | 7.8 | Nov 2 | A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI… Affected: 1.4; 2.0; 2.0.1; 2.1.0 |
| CVE-2020-3467 | 7.7 | Oct 8 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configuration on… Affected: through 2.4; 2.4(0.357); 2.4.0.357; 2.4.0.357; 2.4.0.357; 2.4.0.357; +19 more |
| CVE-2026-76425 | 7.6 | Sep 16 | Cisco ISE SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-20190 | 7.5 | Jun 17 | Cisco Identity Services Engine Information Disclosure Vulnerability Affected: 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0; +3 more |
| CVE-2025-20343 | 7.5 | Nov 5 | A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote… Affected: 3.4.0; 3.4.0; 3.4.0; 3.4.0 |
| CVE-2022-20756 | 7.5 | Apr 6 | A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing… Affected: 2.2.0; 2.4.0; 2.4.0; 2.4.0; 2.6.0; 2.6.0; +10 more |
| CVE-2019-1718 | 7.5 | Apr 17 | A vulnerability in the web interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of… Affected: 2.1(0.907) |
| CVE-2017-6653 | 7.5 | May 22 | A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine (ISE) 2.1(0.474) could allow an unauthenticated, remote attacker to cause a denial… Affected: 2.1(0.474) |
| CVE-2016-9198 | 7.5 | Dec 14 | A vulnerability in the Active Directory integration component of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a denial of… Affected: 1.2(1.199) |
| CVE-2016-6453 | 7.3 | Nov 3 | A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database Affected: 1.3(0.876) |
| CVE-2026-76424 | 7.2 | Sep 16 | Cisco ISE Arbitrary File Access Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2025-20284 | 7.2 | Jul 16 | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +4 more |
| CVE-2025-20283 | 7.2 | Jul 16 | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +4 more |
| CVE-2025-20130 | 7.2 | Jun 4 | A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with… Affected: before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +15 more |
| CVE-2025-20125 | 7.2 | Feb 5 | A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations,… Affected: before 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2025-20124 | 7.2 | Feb 5 | A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device Affected: before 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2024-20528 | 7.2 | Nov 6 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to upload files to arbitrary locations on the underlying operating system of an affected… Affected: 3.0.0 before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2024-20296 | 7.2 | Jul 17 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an… Affected: 3.0.0 before 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +15 more |
| CVE-2023-20196 | 7.2 | Nov 1 | Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device Affected: 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; +23 more |
| CVE-2023-20195 | 7.2 | Nov 1 | Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device Affected: 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; +23 more |