IS
Product
Identity Services Engine
On CISA KEVExploited in the wild
197
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 14High 39Medium 133Low 2
Watch
Add Identity Services Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20532 | 5.5 | Nov 6 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device Affected: 3.0.0 before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2024-20529 | 5.5 | Nov 6 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device Affected: 3.0.0 before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2024-20527 | 5.5 | Nov 6 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device Affected: 3.0.0 before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2024-20332 | 5.5 | Apr 3 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a server-side request… Affected: 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.3.0; +1 more |
| CVE-2025-20304 | 5.4 | Nov 5 | Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack… Affected: through 3.1.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; +15 more |
| CVE-2025-20289 | 5.4 | Nov 5 | Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack… Affected: through 3.1.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; +13 more |
| CVE-2025-20303 | 5.4 | Nov 5 | Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack… Affected: through 3.1.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; +15 more |
| CVE-2024-20487 | 5.4 | Nov 6 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface Affected: 3.0.0 before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2024-20443 | 5.4 | Aug 7 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface Affected: 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; +32 more |
| CVE-2024-20251 | 5.4 | Jan 17 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to perform a stored cross-site… Affected: 1.0; 1.0.4; 1.1; 1.1.1; 1.1.2; 1.1.3; +34 more |
| CVE-2022-20967 | 5.4 | Jan 20 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attacks… Affected: before 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +27 more |
| CVE-2022-20966 | 5.4 | Jan 20 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attacks… Affected: before 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +27 more |
| CVE-2022-20965 | 5.4 | Jan 20 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to take privileges actions within the… Affected: before 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +27 more |
| CVE-2022-20963 | 5.4 | Nov 3 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: before 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; +13 more |
| CVE-2022-20959 | 5.4 | Oct 26 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability Affected: 2.4 before 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; +14 more |
| CVE-2021-34706 | 5.4 | Oct 6 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access sensitive information or… Affected: through 3.1; 3.1(0.518); 3.2(0.149) |
| CVE-2020-3157 | 5.4 | Mar 4 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 2.7 |
| CVE-2019-12638 | 5.4 | Oct 16 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS)… Affected: through 2.2.0; 2.3; 2.3; 2.3; 2.3; 2.3; +15 more |
| CVE-2019-12637 | 5.4 | Oct 16 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site… Affected: through 2.3; 2.3.0.298; 2.3.0.298; 2.3.0.298; 2.3.0.298; 2.3.0.298; +12 more |
| CVE-2019-1719 | 5.4 | Apr 18 | A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 2.1(0.474) |
| CVE-2019-1673 | 5.4 | Feb 8 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability Affected: 2.5(0.353) |
| CVE-2018-0216 | 5.4 | Mar 8 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: 2.0(0.249); 2.1(0.476); 2.2(0.471); 2.3(0.298) |
| CVE-2017-6734 | 5.4 | Jul 10 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a cross-site… Affected: 1.3(0.722); 1.3(0.876); 1.3(0.909); 1.3(106.146); 1.3(120.135); 2.1(0.474); +3 more |
| CVE-2017-6605 | 5.4 | Jul 4 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a reflective cross-site… Affected: 2.1(0.800) |
| CVE-2026-76447 | 5.3 | Sep 16 | Cisco Identity Services Engine Certificate Reload Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-76444 | 5.3 | Sep 16 | Cisco Identity Services Engine Information Disclosure Vulnerability Affected: 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0; +5 more |
| CVE-2026-76433 | 5.3 | Sep 16 | Cisco Identity Services Engine Information Disclosure Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +18 more |
| CVE-2026-76439 | 5.3 | Sep 16 | Cisco Identity Services Engine Event Injection Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-20195 | 5.3 | May 6 | Cisco Identity Services Engine Observable Response Discrepancy Vulnerability Affected: through 3.2.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +15 more |
| CVE-2022-20937 | 5.3 | Nov 3 | A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to negatively affect… Affected: before 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; +12 more |
| CVE-2018-0214 | 5.3 | Mar 8 | A vulnerability in certain CLI commands of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to execute arbitrary commands on the host operating… Affected: 2.1(102.103) |
| CVE-2026-76426 | 4.9 | Sep 16 | Cisco ISE REST API SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-76431 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Deletion Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-76427 | 4.9 | Sep 16 | Cisco ISE XML External Entity Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-76446 | 4.9 | Sep 16 | Cisco Identity Services Engine External Entity Injection Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-76432 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Write Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-76448 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-76434 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Read Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-76451 | 4.9 | Sep 16 | Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-76449 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-76450 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-76428 | 4.9 | Sep 16 | Cisco ISE Profiler SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-20148 | 4.9 | Apr 15 | Cisco Identity Services Engine Path Traversal Vulnerability Affected: before 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +34 more |
| CVE-2025-20305 | 4.9 | Nov 5 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device Affected: through 3.1.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; +15 more |
| CVE-2025-20131 | 4.9 | Aug 20 | A vulnerability in the GUI of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected… Affected: before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +15 more |
| CVE-2024-20476 | 4.9 | Nov 6 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to bypass the authorization mechanisms for specific file… Affected: before 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2024-20466 | 4.9 | Aug 21 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an… Affected: 2.7.0 before 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +12 more |
| CVE-2023-20194 | 4.9 | Sep 7 | A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device Affected: through 2.7; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +13 more |
| CVE-2023-20174 | 4.9 | May 18 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or… Affected: before 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +11 more |
| CVE-2023-20173 | 4.9 | May 18 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or… Affected: before 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +11 more |