IS
Product
Identity Services Engine
On CISA KEVExploited in the wild
197
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 14High 39Medium 133Low 2
Watch
Add Identity Services Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1851 | 6.8 | May 16 | A vulnerability in the External RESTful Services (ERS) API of the Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to generate arbitrary… Affected: 2.2(0.470); 2.3(0.298); 2.4(0.357) |
| CVE-2024-20469 | 6.7 | Sep 4 | Cisco Identity Services Engine Command Injection Vulnerability Affected: 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; +5 more |
| CVE-2023-20170 | 6.7 | Nov 1 | A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and… Affected: 3.2; 3.2; 3.2 |
| CVE-2023-20193 | 6.7 | Sep 7 | A vulnerability in the Embedded Service Router (ESR) of Cisco ISE could allow an authenticated, local attacker to read, write, or delete arbitrary files on the underlying… Affected: through 2.7; 3.0.0 through 3.3.0 |
| CVE-2023-20166 | 6.7 | May 18 | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to… Affected: 3.2; 3.2 |
| CVE-2023-20153 | 6.7 | Apr 5 | Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the… Affected: 3.2 |
| CVE-2023-20121 | 6.7 | Apr 5 | Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could… Affected: 3.2 |
| CVE-2023-20152 | 6.7 | Apr 5 | Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the… Affected: 3.2 |
| CVE-2023-20023 | 6.7 | Apr 5 | Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the… Affected: 3.2 |
| CVE-2023-20022 | 6.7 | Apr 5 | Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the… Affected: 3.2 |
| CVE-2023-20021 | 6.7 | Apr 5 | Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the… Affected: 3.2 |
| CVE-2020-27122 | 6.7 | Nov 6 | A vulnerability in the Microsoft Active Directory integration of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to elevate privileges on an… Affected: before 3.0.0 |
| CVE-2018-0275 | 6.7 | Apr 19 | A vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to access the device's shell Affected: before 2.2\(0.470\) |
| CVE-2018-0221 | 6.7 | Mar 8 | A vulnerability in specific CLI commands for the Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection to the underlying… Affected: 2.0(0.249); 2.1(0.474); 2.2(0.470); 2.2(0.903); 2.3(0.298); 2.4(0.192) |
| CVE-2019-1736 | 6.6 | Sep 23 | A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker to bypass Unified Extensible Firmware Interface (UEFI)… Affected: 2.4(0.357); 2.6(0.156) |
| CVE-2024-20537 | 6.5 | Nov 6 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to bypass the authorization mechanisms for specific administrative… Affected: 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +23 more |
| CVE-2024-20531 | 6.5 | Nov 6 | A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device and conduct… Affected: 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +25 more |
| CVE-2024-20515 | 6.5 | Oct 2 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an… Affected: 2.7.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +25 more |
| CVE-2023-20111 | 6.5 | Aug 16 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access sensitive information Affected: through 2.6.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0; +19 more |
| CVE-2023-20171 | 6.5 | May 18 | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system Affected: 3.1; 3.1; 3.1; 3.1; 3.1; 3.2; +1 more |
| CVE-2023-20087 | 6.5 | May 18 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files… Affected: through 3.1; 3.2 |
| CVE-2023-20077 | 6.5 | May 18 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files… Affected: through 3.1; 3.2 |
| CVE-2022-20819 | 6.5 | Jun 15 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an… Affected: before 2.4.0.357; 2.6. before 2.6.0.156; 2.7 before 2.7.0.305; 2.4.0.357; 2.4.0.357; 2.4.0.357; +11 more |
| CVE-2022-20782 | 6.5 | Apr 6 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an… Affected: 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +17 more |
| CVE-2021-40123 | 6.5 | Oct 21 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative read-only… Affected: through 2.6; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +19 more |
| CVE-2021-1412 | 6.5 | Feb 17 | Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information Affected: before 2.3.0; 2.3.0; 2.3.0; 2.3.0; 2.3.0; 2.3.0; +29 more |
| CVE-2019-15255 | 6.5 | Jan 26 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access… Affected: 2.2; 2.2(0.470) |
| CVE-2019-1942 | 6.5 | Jul 17 | A vulnerability in the sponsor portal web interface for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to impact the integrity of an affected… Affected: through 2.6.0 |
| CVE-2018-0187 | 6.5 | Jan 23 | Cisco Identity Services Engine Privileged Account Sensitive Information Disclosure Vulnerability Affected: 2.4(0.901); 2.4(0.901.1) |
| CVE-2025-20264 | 6.4 | Jun 25 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass the authorization mechanisms… Affected: 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +29 more |
| CVE-2018-0215 | 6.3 | Mar 8 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: 2.0(0.234) |
| CVE-2024-20538 | 6.1 | Nov 6 | A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface Affected: 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +24 more |
| CVE-2024-20530 | 6.1 | Nov 6 | A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface Affected: 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +25 more |
| CVE-2024-20525 | 6.1 | Nov 6 | A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface Affected: 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +25 more |
| CVE-2023-20085 | 6.1 | Mar 1 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 3.2 |
| CVE-2021-34738 | 6.1 | Oct 21 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an attacker to conduct a cross-site scripting (XSS)… Affected: before 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +19 more |
| CVE-2020-3551 | 6.1 | Nov 6 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 2.6; 2.7 |
| CVE-2020-3156 | 6.1 | Feb 19 | A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks Affected: 2.6.0; 2.6.0; 2.6.0; 2.7 |
| CVE-2019-12631 | 6.1 | Oct 2 | A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 2.3; 2.4; 2.4; 2.4; 2.4; 2.4; +8 more |
| CVE-2019-12644 | 6.1 | Sep 5 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: before 2.6.0; 2.7(0.207) |
| CVE-2019-1941 | 6.1 | Jul 17 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: before 2.4.0; 2.4(0.902); 2.4.0; 2.4.0; 2.4.0; 2.4.0; +4 more |
| CVE-2018-15455 | 6.1 | Jan 23 | Cisco Identity Services Engine Logging Cross-Site Scripting Vulnerability Affected: 2.2(0.910); 2.3(0.905); 2.4(0.903) |
| CVE-2018-0212 | 6.1 | Mar 8 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 2.1(0.474); 2.1(0.904); 2.2(0.470); 2.3(0.298) |
| CVE-2018-0091 | 6.1 | Jan 18 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a Document Object Model… Affected: All versions, or not specified |
| CVE-2017-6733 | 6.1 | Jul 10 | A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored… Affected: 2.1(102.101); 2.2(0.283); 2.3(0.151) |
| CVE-2017-6701 | 6.1 | Jul 4 | A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site… Affected: 2.1(102.101) |
| CVE-2026-20136 | 6.0 | Apr 15 | Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +15 more |
| CVE-2023-20030 | 6.0 | Apr 5 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access sensitive information,… Affected: before 3.2; 3.2 |
| CVE-2020-3353 | 5.9 | Jun 3 | A vulnerability in the syslog processing engine of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 2.2.0.470; 2.2.0.470; 2.2.0.470; 2.2.0.470; 2.2.0.470; 2.2.0.470; +15 more |
| CVE-2026-20146 | 5.5 | Jul 15 | Cisco Identity Services Engine Path Traversal Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +18 more |