IS
Product
Identity Services Engine
On CISA KEVExploited in the wild
197
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 14High 39Medium 133Low 2
Watch
Add Identity Services Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20486 | 8.8 | Aug 21 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: 2.7.0 before 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +14 more |
| CVE-2024-20368 | 8.8 | Apr 3 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: 2.7.0 before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +11 more |
| CVE-2023-20272 | 8.8 | Nov 21 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of… Affected: 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +7 more |
| CVE-2023-20175 | 8.8 | Nov 1 | A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and… Affected: 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +29 more |
| CVE-2022-20964 | 8.8 | Jan 20 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inject arbitrary commands on the… Affected: before 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +27 more |
| CVE-2022-20962 | 8.8 | Nov 3 | A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to make unauthorized changes to the file… Affected: 3.1; 3.1; 3.1 |
| CVE-2022-20956 | 8.8 | Nov 3 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access… Affected: 3.1; 3.1; 3.1; 3.1; 3.2 |
| CVE-2022-20961 | 8.8 | Nov 3 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: before 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +23 more |
| CVE-2018-0213 | 8.8 | Mar 8 | A vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to gain elevated privileges Affected: 2.1(0.904) |
| CVE-2025-20152 | 8.6 | May 21 | A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 3.4.0 |
| CVE-2023-20243 | 8.6 | Sep 6 | A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to… Affected: 3.1; 3.1; 3.1; 3.1; 3.1; 3.1; +4 more |
| CVE-2018-0277 | 8.6 | May 17 | A vulnerability in the Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) certificate validation during EAP authentication for the Cisco Identity Services… Affected: 2.0(0.306); 2.0(1.130); 2.1(0.474); 2.2(0.470) |
| CVE-2024-20417 | 8.1 | Aug 21 | Multiple vulnerabilities in the REST API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct blind SQL injection attacks Affected: after 3.0.0 through 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2022-20822 | 8.1 | Oct 26 | Cisco Identity Services Engine Unauthorized File Access Vulnerability Affected: 3.1; 3.1; 3.1; 3.2 |
| CVE-2021-1594 | 8.1 | Oct 6 | A vulnerability in the REST API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a command injection attack and elevate… Affected: 2.4.0 before 2.6.0; 2.4(0.902); 2.6(0.156); 2.6.0; 2.6.0; 2.6.0; +18 more |
| CVE-2023-20122 | 7.8 | Apr 5 | Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could… Affected: 3.2 |
| CVE-2017-12261 | 7.8 | Nov 2 | A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI… Affected: 1.4; 2.0; 2.0.1; 2.1.0 |
| CVE-2020-3467 | 7.7 | Oct 8 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configuration on… Affected: through 2.4; 2.4(0.357); 2.4.0.357; 2.4.0.357; 2.4.0.357; 2.4.0.357; +19 more |
| CVE-2026-76425 | 7.6 | Sep 16 | Cisco ISE SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2026-20190 | 7.5 | Jun 17 | Cisco Identity Services Engine Information Disclosure Vulnerability Affected: 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0; +3 more |
| CVE-2025-20343 | 7.5 | Nov 5 | Cisco Identity Services Engine Radius Suppression Denial of Service Vulnerability Affected: 3.4.0; 3.4.0; 3.4.0; 3.4.0 |
| CVE-2022-20756 | 7.5 | Apr 6 | A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing… Affected: 2.2.0; 2.4.0; 2.4.0; 2.4.0; 2.6.0; 2.6.0; +10 more |
| CVE-2019-1718 | 7.5 | Apr 17 | A vulnerability in the web interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of… Affected: 2.1(0.907) |
| CVE-2017-6653 | 7.5 | May 22 | A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine (ISE) 2.1(0.474) could allow an unauthenticated, remote attacker to cause a denial… Affected: 2.1(0.474) |
| CVE-2016-9198 | 7.5 | Dec 14 | A vulnerability in the Active Directory integration component of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a denial of… Affected: 1.2(1.199) |
| CVE-2016-6453 | 7.3 | Nov 3 | A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database Affected: 1.3(0.876) |
| CVE-2026-76424 | 7.2 | Sep 16 | Cisco ISE Arbitrary File Access Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more |
| CVE-2025-20284 | 7.2 | Jul 16 | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +4 more |
| CVE-2025-20283 | 7.2 | Jul 16 | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +4 more |
| CVE-2025-20130 | 7.2 | Jun 4 | A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with… Affected: before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +15 more |
| CVE-2025-20125 | 7.2 | Feb 5 | A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations,… Affected: before 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2025-20124 | 7.2 | Feb 5 | A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device Affected: before 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2024-20528 | 7.2 | Nov 6 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to upload files to arbitrary locations on the underlying operating system of an affected… Affected: 3.0.0 before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +16 more |
| CVE-2024-20296 | 7.2 | Jul 17 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an… Affected: 3.0.0 before 3.1; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +15 more |
| CVE-2023-20196 | 7.2 | Nov 1 | Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device Affected: 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; +23 more |
| CVE-2023-20195 | 7.2 | Nov 1 | Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device Affected: 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; +23 more |
| CVE-2023-20164 | 7.2 | May 18 | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and… Affected: through 2.7; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +11 more |
| CVE-2023-20163 | 7.2 | May 18 | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and… Affected: through 2.7; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +11 more |
| CVE-2018-15459 | 7.2 | Jan 23 | Cisco Identity Services Engine Privilege Escalation Vulnerability Affected: 2.3(0.298); 2.5(0.1) |
Showing 39