# Cisco Identity Services Engine Software.

Every CVE that names Cisco Identity Services Engine Software among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Cross-site scripting in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2025-20303.md)
  `CVE-2025-20303` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.4 Medium · Not analysed yet · Published 5 Nov 2025 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Radius Suppression Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20343.md)
  `CVE-2025-20343` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 8.6 High · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-697
- [Cisco Identity Services Engine Arbitrary File Upload Vulnerability](https://agentprime.io/advisories/CVE-2025-20131.md)
  `CVE-2025-20131` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Broken access control
- [Cisco Identity Services Engine Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20332.md)
  `CVE-2025-20332` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Broken access control
- [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy](https://agentprime.io/advisories/CVE-2025-20331.md)
  `CVE-2025-20331` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Cross-site scripting (XSS)
- [Cisco ISE API Unauthenticated Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20337.md)
  `CVE-2025-20337` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.74 · Not analysed yet · Published 16 Jul 2025 · Tags: Other injection
- [Cisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20285.md)
  `CVE-2025-20285` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.1 Medium · Not analysed yet · Published 16 Jul 2025 · Tags: CWE-302
- [Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20284.md)
  `CVE-2025-20284` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · EPSS 0.25 · Not analysed yet · Published 16 Jul 2025 · Tags: Other injection
- [Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20283.md)
  `CVE-2025-20283` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · EPSS 0.13 · Not analysed yet · Published 16 Jul 2025 · Tags: Other injection
- [Cisco ISE API Unauthenticated Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20282.md)
  `CVE-2025-20282` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.39 · Not analysed yet · Published 25 Jun 2025 · Tags: Privilege escalation
- [Cisco ISE API Unauthenticated Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20281.md)
  `CVE-2025-20281` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.98 · Not analysed yet · Published 25 Jun 2025 · Tags: Other injection
- [Cisco Identity Services Engine Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20264.md)
  `CVE-2025-20264` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.4 Medium · Not analysed yet · Published 25 Jun 2025 · Tags: Broken access control
- [ISE on AWS Static Credential](https://agentprime.io/advisories/CVE-2025-20286.md)
  `CVE-2025-20286` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jun 2025 · Tags: Hard-coded credentials
- [Cisco Identity Services Engine Access Control Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20130.md)
  `CVE-2025-20130` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 4 Jun 2025 · Tags: Broken access control
- [Cisco Identity Services Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2025-20267.md)
  `CVE-2025-20267` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 21 May 2025 · Tags: Cross-site scripting (XSS)
- [ISE restart](https://agentprime.io/advisories/CVE-2025-20152.md)
  `CVE-2025-20152` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 8.6 High · Not analysed yet · Published 21 May 2025 · Tags: Memory corruption
- [Cross-site scripting in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2025-20205.md)
  `CVE-2025-20205` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 5 Feb 2025 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2025-20204.md)
  `CVE-2025-20204` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 5 Feb 2025 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20125.md)
  `CVE-2025-20125` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 5 Feb 2025 · Tags: Broken access control
- [Cisco Identity Services Engine Java Deserialization Vulnerability](https://agentprime.io/advisories/CVE-2025-20124.md)
  `CVE-2025-20124` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.19 · Not analysed yet · Published 5 Feb 2025 · Tags: Insecure deserialization
- [Cisco Identity Services Engine Password Disclosure to an Unauthorized Actor Vulnerability](https://agentprime.io/advisories/CVE-2020-3525.md)
  `CVE-2020-3525` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Information disclosure
- [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2024-20539.md)
  `CVE-2024-20539` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2024-20538.md)
  `CVE-2024-20538` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.1 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20537.md)
  `CVE-2024-20537` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Broken access control
- [Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability](https://agentprime.io/advisories/CVE-2024-20532.md)
  `CVE-2024-20532` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.5 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Path traversal
- [Cisco Identity Services Engine XML External Entity Injection Vulnerability](https://agentprime.io/advisories/CVE-2024-20531.md)
  `CVE-2024-20531` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.5 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: XML external entities (XXE)
- [Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2024-20530.md)
  `CVE-2024-20530` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.1 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability](https://agentprime.io/advisories/CVE-2024-20529.md)
  `CVE-2024-20529` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.5 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Path traversal
- [Cisco Identity Services Engine Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2024-20528.md)
  `CVE-2024-20528` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 3.8 Low · Not analysed yet · Published 6 Nov 2024 · Tags: Path traversal
- [Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability](https://agentprime.io/advisories/CVE-2024-20527.md)
  `CVE-2024-20527` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.5 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Path traversal
- [Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2024-20525.md)
  `CVE-2024-20525` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.1 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy](https://agentprime.io/advisories/CVE-2024-20487.md)
  `CVE-2024-20487` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20476.md)
  `CVE-2024-20476` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: CWE-602
- [Cisco Identity Services Engine Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-20515.md)
  `CVE-2024-20515` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 2 Oct 2024 · Tags: Weak cryptography or TLS
- [Cisco Identity Services Engine Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2024-20469.md)
  `CVE-2024-20469` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: Command injection
- [Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabities](https://agentprime.io/advisories/CVE-2024-20417.md)
  `CVE-2024-20417` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 21 Aug 2024 · Tags: SQL injection
- [Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-20466.md)
  `CVE-2024-20466` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 21 Aug 2024 · Tags: Privilege escalation, Broken access control
- [Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2024-20486.md)
  `CVE-2024-20486` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 21 Aug 2024 · Tags: Cross-site request forgery (CSRF)
- [Cross-site scripting in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2024-20479.md)
  `CVE-2024-20479` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 7 Aug 2024 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2024-20443.md)
  `CVE-2024-20443` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 7 Aug 2024 · Tags: Cross-site scripting (XSS)
- [Unrestricted file upload in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2024-20296.md)
  `CVE-2024-20296` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.7 Medium · Not analysed yet · Published 17 Jul 2024 · Tags: Unrestricted file upload
- [Cross-site request forgery in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2024-20368.md)
  `CVE-2024-20368` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 3 Apr 2024 · Tags: Cross-site request forgery (CSRF)
- [Server-side request forgery in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2024-20332.md)
  `CVE-2024-20332` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.5 Medium · Not analysed yet · Published 3 Apr 2024 · Tags: Server-side request forgery (SSRF)
- [Cross-site scripting in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2024-20251.md)
  `CVE-2024-20251` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 17 Jan 2024 · Tags: Cross-site scripting (XSS)
- [A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of the application.](https://agentprime.io/advisories/CVE-2023-20272.md)
  `CVE-2023-20272` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.7 Medium · Not analysed yet · Published 21 Nov 2023 · Tags: CWE-424
- [A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the web-based management interface of an af…](https://agentprime.io/advisories/CVE-2023-20208.md)
  `CVE-2023-20208` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 21 Nov 2023 · Tags: Cross-site scripting (XSS)
- [OS command injection in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2023-20175.md)
  `CVE-2023-20175` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 8.8 High · Not analysed yet · Published 1 Nov 2023 · Tags: Command injection
- [Command injection in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2023-20170.md)
  `CVE-2023-20170` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Command injection
- [Unrestricted file upload in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2023-20196.md)
  `CVE-2023-20196` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.7 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Unrestricted file upload
- [Unrestricted file upload in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2023-20195.md)
  `CVE-2023-20195` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.7 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Unrestricted file upload
- [Out-of-bounds write in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2023-20213.md)
  `CVE-2023-20213` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption
- [A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device.](https://agentprime.io/advisories/CVE-2023-20194.md)
  `CVE-2023-20194` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 7 Sept 2023 · Tags: Privilege escalation
- [OS command injection in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2023-20193.md)
  `CVE-2023-20193` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 7 Sept 2023 · Tags: Command injection
- [A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS…](https://agentprime.io/advisories/CVE-2023-20243.md)
  `CVE-2023-20243` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 8.6 High · Not analysed yet · Published 6 Sept 2023 · Tags: CWE-399
- [A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access sensitive information.](https://agentprime.io/advisories/CVE-2023-20111.md)
  `CVE-2023-20111` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: Information disclosure
- [Cross-site scripting in Cisco Identity Services Engine Software and others](https://agentprime.io/advisories/CVE-2023-20228.md)
  `CVE-2023-20228` · CVE record: Cisco Cisco Identity Services Engine Software and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine XML External Entity Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20174.md)
  `CVE-2023-20174` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 18 May 2023 · Tags: XML external entities (XXE)
- [Cisco Identity Services Engine XML External Entity Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20173.md)
  `CVE-2023-20173` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 18 May 2023 · Tags: XML external entities (XXE)
- [Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20172.md)
  `CVE-2023-20172` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.4 Medium · Not analysed yet · Published 18 May 2023 · Tags: CWE-602
- [Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20171.md)
  `CVE-2023-20171` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.4 Medium · Not analysed yet · Published 18 May 2023 · Tags: CWE-602

Newest: <https://agentprime.io/advisories/technology/cisco-identity-services-engine-software.md>
Older: <https://agentprime.io/advisories/technology/cisco-identity-services-engine-software.md?cursor=WyIyMDIzLTA1LTE4VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yMDE3MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-identity-services-engine-software&cursor=WyIyMDI1LTExLTA1VDE2OjMyOjI4Ljg2MDAwMFoiLCJDVkUtMjAyNS0yMDI4OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-identity-services-engine-software/?cursor=WyIyMDI1LTExLTA1VDE2OjMyOjI4Ljg2MDAwMFoiLCJDVkUtMjAyNS0yMDI4OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.