# Cisco Identity Services Engine Software.

Every CVE that names Cisco Identity Services Engine Software among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Cisco Identity Services Engine Path Traversal Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20167.md)
  `CVE-2023-20167` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 18 May 2023 · Tags: Path traversal
- [Cisco Identity Services Engine Path Traversal Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20166.md)
  `CVE-2023-20166` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 18 May 2023 · Tags: Path traversal
- [Cisco Identity Services Engine Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20164.md)
  `CVE-2023-20164` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 18 May 2023 · Tags: Command injection
- [Cisco Identity Services Engine Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20163.md)
  `CVE-2023-20163` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 18 May 2023 · Tags: Command injection
- [Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20106.md)
  `CVE-2023-20106` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.4 Medium · Not analysed yet · Published 18 May 2023 · Tags: CWE-602
- [Cisco Identity Services Engine Arbitrary File Download Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20087.md)
  `CVE-2023-20087` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 18 May 2023 · Tags: CWE-37
- [Cisco Identity Services Engine Arbitrary File Download Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20077.md)
  `CVE-2023-20077` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 18 May 2023 · Tags: CWE-37
- [Cisco Identity Services Engine Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20153.md)
  `CVE-2023-20153` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 5 Apr 2023 · Tags: Command injection
- [Cisco Identity Services Engine Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20152.md)
  `CVE-2023-20152` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 5 Apr 2023 · Tags: Command injection
- [Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20122.md)
  `CVE-2023-20122` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 5 Apr 2023 · Tags: Command injection
- [Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20121.md)
  `CVE-2023-20121` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 5 Apr 2023 · Tags: Command injection
- [Cisco Identity Services Engine XML External Entity Injection Vulnerability](https://agentprime.io/advisories/CVE-2023-20030.md)
  `CVE-2023-20030` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 5 Apr 2023 · Tags: XML external entities (XXE)
- [Cisco Identity Services Engine Privilege Escalation Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20023.md)
  `CVE-2023-20023` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 5 Apr 2023 · Tags: Command injection
- [Cisco Identity Services Engine Privilege Escalation Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20022.md)
  `CVE-2023-20022` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 5 Apr 2023 · Tags: Command injection
- [Cisco Identity Services Engine Privilege Escalation Vulnerabilities](https://agentprime.io/advisories/CVE-2023-20021.md)
  `CVE-2023-20021` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 5 Apr 2023 · Tags: Command injection
- [Cross-site scripting in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2023-20085.md)
  `CVE-2023-20085` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.1 Medium · Not analysed yet · Published 16 Feb 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2022-20967.md)
  `CVE-2022-20967` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 18 Jan 2023 · Tags: Cross-site scripting (XSS)
- [OS command injection in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2022-20964.md)
  `CVE-2022-20964` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.3 Medium · EPSS 0.31 · Not analysed yet · Published 18 Jan 2023 · Tags: Command injection
- [Cross-site scripting in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2022-20966.md)
  `CVE-2022-20966` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.4 Medium · EPSS 0.28 · Not analysed yet · Published 18 Jan 2023 · Tags: Cross-site scripting (XSS)
- [A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to take privileges actions within the web-based management interf…](https://agentprime.io/advisories/CVE-2022-20965.md)
  `CVE-2022-20965` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 18 Jan 2023 · Tags: CWE-648
- [A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to make unauthorized changes to the file system of an affecte…](https://agentprime.io/advisories/CVE-2022-20962.md)
  `CVE-2022-20962` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 3.8 Low · Not analysed yet · Published 3 Nov 2022 · Tags: CWE-37
- [A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a us…](https://agentprime.io/advisories/CVE-2022-20963.md)
  `CVE-2022-20963` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: Cross-site scripting (XSS)
- [A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to negatively affect the performance of an…](https://agentprime.io/advisories/CVE-2022-20937.md)
  `CVE-2022-20937` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: CWE-410
- [A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files.](https://agentprime.io/advisories/CVE-2022-20956.md)
  `CVE-2022-20956` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2022 · Tags: CWE-648
- [Cross-site request forgery in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2022-20961.md)
  `CVE-2022-20961` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2022 · Tags: Cross-site request forgery (CSRF)
- [Cisco Identity Services Engine Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2022-20959.md)
  `CVE-2022-20959` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.1 Medium · Not analysed yet · Published 26 Oct 2022 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Unauthorized File Access Vulnerability](https://agentprime.io/advisories/CVE-2022-20822.md)
  `CVE-2022-20822` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 7.1 High · Not analysed yet · Published 26 Oct 2022 · Tags: Path traversal
- [Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-20914.md)
  `CVE-2022-20914` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 10 Aug 2022 · Tags: CWE-549
- [Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-20819.md)
  `CVE-2022-20819` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 15 Jun 2022 · Tags: Privilege escalation
- [Cisco Identity Services Engine Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-20733.md)
  `CVE-2022-20733` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.3 Medium · Not analysed yet · Published 15 Jun 2022 · Tags: Authentication bypass
- [Cisco Identity Services Engine RADIUS Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20756.md)
  `CVE-2022-20756` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 8.6 High · Not analysed yet · Published 6 Apr 2022 · Tags: CWE-399
- [Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-20782.md)
  `CVE-2022-20782` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 6 Apr 2022 · Tags: Privilege escalation
- [Cisco Identity Services Engine File Download Vulnerability](https://agentprime.io/advisories/CVE-2021-40123.md)
  `CVE-2021-40123` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 21 Oct 2021 · Tags: Privilege escalation
- [Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2021-40121.md)
  `CVE-2021-40121` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.1 Medium · Not analysed yet · Published 21 Oct 2021 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2021-34738.md)
  `CVE-2021-34738` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.1 Medium · Not analysed yet · Published 21 Oct 2021 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1594.md)
  `CVE-2021-1594` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2021 · Tags: Privilege escalation
- [Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-34702.md)
  `CVE-2021-34702` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: Information disclosure
- [Cisco Identity Services Engine XML External Entity Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-34706.md)
  `CVE-2021-34706` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.4 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: XML external entities (XXE)
- [Cisco Identity Services Engine Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2021-34759.md)
  `CVE-2021-34759` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 2 Sept 2021 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1607.md)
  `CVE-2021-1607` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 8 Jul 2021 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1606.md)
  `CVE-2021-1606` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 8 Jul 2021 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1605.md)
  `CVE-2021-1605` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 8 Jul 2021 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1604.md)
  `CVE-2021-1604` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 8 Jul 2021 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1603.md)
  `CVE-2021-1603` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 8 Jul 2021 · Tags: Cross-site scripting (XSS)
- [Cisco ADE-OS Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2021-1306.md)
  `CVE-2021-1306` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.4 Medium · Not analysed yet · Published 22 May 2021 · Tags: Path traversal
- [Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1412.md)
  `CVE-2021-1412` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 17 Feb 2021 · Tags: Privilege escalation
- [Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1416.md)
  `CVE-2021-1416` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 17 Feb 2021 · Tags: Privilege escalation
- [Cisco Identity Services Engine Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3551.md)
  `CVE-2020-3551` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.1 Medium · Not analysed yet · Published 6 Nov 2020 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2020-27122.md)
  `CVE-2020-27122` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.4 Medium · Not analysed yet · Published 6 Nov 2020 · Tags: Privilege escalation
- [Cisco Identity Services Engine Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-26083.md)
  `CVE-2020-26083` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 6 Nov 2020 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3589.md)
  `CVE-2020-3589` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 8 Oct 2020 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2020-3467.md)
  `CVE-2020-3467` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 7.7 High · Not analysed yet · Published 8 Oct 2020 · Tags: Broken access control
- [Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-1736.md)
  `CVE-2019-1736` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.2 Medium · Not analysed yet · Published 23 Sept 2020 · Tags: Weak cryptography or TLS
- [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2020-3340.md)
  `CVE-2020-3340` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 2 Jul 2020 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3353.md)
  `CVE-2020-3353` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.9 Medium · Not analysed yet · Published 3 Jun 2020 · Tags: Race condition
- [Cisco Identity Services Engine Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3157.md)
  `CVE-2020-3157` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.4 Medium · Not analysed yet · Published 4 Mar 2020 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3156.md)
  `CVE-2020-3156` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.1 Medium · Not analysed yet · Published 19 Feb 2020 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2020-3149.md)
  `CVE-2020-3149` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 5 Feb 2020 · Tags: Cross-site scripting (XSS)
- [Cisco Identity Services Engine Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-15255.md)
  `CVE-2019-15255` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 26 Jan 2020 · Tags: Broken access control
- [Cisco Identity Services Engine Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2019-15282.md)
  `CVE-2019-15282` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 16 Oct 2019 · Tags: Authentication bypass

Newest: <https://agentprime.io/advisories/technology/cisco-identity-services-engine-software.md>
Older: <https://agentprime.io/advisories/technology/cisco-identity-services-engine-software.md?cursor=WyIyMDE5LTEwLTE2VDE4OjM2OjQ2Ljc1MTAwMFoiLCJDVkUtMjAxOS0xNTI4MiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-identity-services-engine-software&cursor=WyIyMDIzLTA1LTE4VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yMDE3MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-identity-services-engine-software/?cursor=WyIyMDIzLTA1LTE4VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yMDE3MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.