Advisories · Technology

Cisco Identity Services Engine Software.

Every CVE that names Cisco Identity Services Engine Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-20167 CVE record

CVSS 6.0 Medium

Cisco Identity Services Engine Path Traversal Vulnerabilities
- Cisco Identity Services Engine Software
- Path traversal
Not analysed yet 18 May 2023
CVE-2023-20166 CVE record

CVSS 6.0 Medium

Cisco Identity Services Engine Path Traversal Vulnerabilities
- Cisco Identity Services Engine Software
- Path traversal
Not analysed yet 18 May 2023
CVE-2023-20164 CVE record

CVSS 6.5 Medium

Cisco Identity Services Engine Command Injection Vulnerabilities
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 18 May 2023
CVE-2023-20163 CVE record

CVSS 6.5 Medium

Cisco Identity Services Engine Command Injection Vulnerabilities
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 18 May 2023
CVE-2023-20106 CVE record

CVSS 5.4 Medium

Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities
- Cisco Identity Services Engine Software
- CWE-602
Not analysed yet 18 May 2023
CVE-2023-20087 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Arbitrary File Download Vulnerabilities
- Cisco Identity Services Engine Software
- CWE-37
Not analysed yet 18 May 2023
CVE-2023-20077 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Arbitrary File Download Vulnerabilities
- Cisco Identity Services Engine Software
- CWE-37
Not analysed yet 18 May 2023
CVE-2023-20153 CVE record

CVSS 6.0 Medium

Cisco Identity Services Engine Command Injection Vulnerabilities
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 5 Apr 2023
CVE-2023-20152 CVE record

CVSS 6.0 Medium

Cisco Identity Services Engine Command Injection Vulnerabilities
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 5 Apr 2023
CVE-2023-20122 CVE record

CVSS 6.0 Medium

Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 5 Apr 2023
CVE-2023-20121 CVE record

CVSS 6.0 Medium

Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 5 Apr 2023
CVE-2023-20030 CVE record

CVSS 6.0 Medium

Cisco Identity Services Engine XML External Entity Injection Vulnerability
- Cisco Identity Services Engine Software
- XML external entities (XXE)
Not analysed yet 5 Apr 2023
CVE-2023-20023 CVE record

CVSS 6.0 Medium

Cisco Identity Services Engine Privilege Escalation Vulnerabilities
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 5 Apr 2023
CVE-2023-20022 CVE record

CVSS 6.0 Medium

Cisco Identity Services Engine Privilege Escalation Vulnerabilities
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 5 Apr 2023
CVE-2023-20021 CVE record

CVSS 6.0 Medium

Cisco Identity Services Engine Privilege Escalation Vulnerabilities
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 5 Apr 2023
CVE-2023-20085 CVE record

CVSS 6.1 Medium

Cross-site scripting in Cisco Identity Services Engine Software
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 16 Feb 2023
CVE-2022-20967 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Identity Services Engine Software
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 18 Jan 2023
CVE-2022-20964 CVE record

CVSS 6.3 Medium

OS command injection in Cisco Identity Services Engine Software
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 18 Jan 2023
CVE-2022-20966 CVE record

CVSS 5.4 Medium

Cross-site scripting in Cisco Identity Services Engine Software
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 18 Jan 2023
CVE-2022-20965 CVE record

CVSS 4.3 Medium

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to take privileges actions within the web-based management interf…
- Cisco Identity Services Engine Software
- CWE-648
Not analysed yet 18 Jan 2023
CVE-2022-20962 CVE record

CVSS 3.8 Low

A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to make unauthorized changes to the file system of an affecte…
- Cisco Identity Services Engine Software
- CWE-37
Not analysed yet 3 Nov 2022
CVE-2022-20963 CVE record

CVSS 5.4 Medium

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a us…
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2022
CVE-2022-20937 CVE record

CVSS 5.3 Medium

A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to negatively affect the performance of an…
- Cisco Identity Services Engine Software
- CWE-410
Not analysed yet 3 Nov 2022
CVE-2022-20956 CVE record

CVSS 7.1 High

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files.
- Cisco Identity Services Engine Software
- CWE-648
Not analysed yet 3 Nov 2022
CVE-2022-20961 CVE record

CVSS 8.8 High

Cross-site request forgery in Cisco Identity Services Engine Software
- Cisco Identity Services Engine Software
- Cross-site request forgery (CSRF)
Not analysed yet 3 Nov 2022
CVE-2022-20959 CVE record

CVSS 6.1 Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 26 Oct 2022
CVE-2022-20822 CVE record

CVSS 7.1 High

Cisco Identity Services Engine Unauthorized File Access Vulnerability
- Cisco Identity Services Engine Software
- Path traversal
Not analysed yet 26 Oct 2022
CVE-2022-20914 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- CWE-549
Not analysed yet 10 Aug 2022
CVE-2022-20819 CVE record

CVSS 6.5 Medium

Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- Privilege escalation
Not analysed yet 15 Jun 2022
CVE-2022-20733 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Authentication Bypass Vulnerability
- Cisco Identity Services Engine Software
- Authentication bypass
Not analysed yet 15 Jun 2022
CVE-2022-20756 CVE record

CVSS 8.6 High

Cisco Identity Services Engine RADIUS Service Denial of Service Vulnerability
- Cisco Identity Services Engine Software
- CWE-399
Not analysed yet 6 Apr 2022
CVE-2022-20782 CVE record

CVSS 6.5 Medium

Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- Privilege escalation
Not analysed yet 6 Apr 2022
CVE-2021-40123 CVE record

CVSS 4.3 Medium

Cisco Identity Services Engine File Download Vulnerability
- Cisco Identity Services Engine Software
- Privilege escalation
Not analysed yet 21 Oct 2021
CVE-2021-40121 CVE record

CVSS 6.1 Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 21 Oct 2021
CVE-2021-34738 CVE record

CVSS 6.1 Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 21 Oct 2021
CVE-2021-1594 CVE record

CVSS 7.5 High

Cisco Identity Services Engine Privilege Escalation Vulnerability
- Cisco Identity Services Engine Software
- Privilege escalation
Not analysed yet 6 Oct 2021
CVE-2021-34702 CVE record

CVSS 4.3 Medium

Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- Information disclosure
Not analysed yet 6 Oct 2021
CVE-2021-34706 CVE record

CVSS 6.4 Medium

Cisco Identity Services Engine XML External Entity Injection Vulnerability
- Cisco Identity Services Engine Software
- XML external entities (XXE)
Not analysed yet 6 Oct 2021
CVE-2021-34759 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 2 Sept 2021
CVE-2021-1607 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2021
CVE-2021-1606 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2021
CVE-2021-1605 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2021
CVE-2021-1604 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2021
CVE-2021-1603 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2021
CVE-2021-1306 CVE record

CVSS 4.4 Medium

Cisco ADE-OS Local File Inclusion Vulnerability
- Cisco Identity Services Engine Software
- Path traversal
Not analysed yet 22 May 2021
CVE-2021-1412 CVE record

CVSS 6.5 Medium

Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities
- Cisco Identity Services Engine Software
- Privilege escalation
Not analysed yet 17 Feb 2021
CVE-2021-1416 CVE record

CVSS 6.5 Medium

Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities
- Cisco Identity Services Engine Software
- Privilege escalation
Not analysed yet 17 Feb 2021
CVE-2020-3551 CVE record

CVSS 6.1 Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2020
CVE-2020-27122 CVE record

CVSS 4.4 Medium

Cisco Identity Services Engine Privilege Escalation Vulnerability
- Cisco Identity Services Engine Software
- Privilege escalation
Not analysed yet 6 Nov 2020
CVE-2020-26083 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2020
CVE-2020-3589 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 8 Oct 2020
CVE-2020-3467 CVE record

CVSS 7.7 High

Cisco Identity Services Engine Authorization Bypass Vulnerability
- Cisco Identity Services Engine Software
- Broken access control
Not analysed yet 8 Oct 2020
CVE-2019-1736 CVE record

CVSS 6.2 Medium

Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability
- Cisco Identity Services Engine Software
- Weak cryptography or TLS
Not analysed yet 23 Sept 2020
CVE-2020-3340 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 2 Jul 2020
CVE-2020-3353 CVE record

CVSS 5.9 Medium

Cisco Identity Services Engine Denial of Service Vulnerability
- Cisco Identity Services Engine Software
- Race condition
Not analysed yet 3 Jun 2020
CVE-2020-3157 CVE record

CVSS 5.4 Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 4 Mar 2020
CVE-2020-3156 CVE record

CVSS 6.1 Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 19 Feb 2020
CVE-2020-3149 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 5 Feb 2020
CVE-2019-15255 CVE record

CVSS 6.5 Medium

Cisco Identity Services Engine Authorization Bypass Vulnerability
- Cisco Identity Services Engine Software
- Broken access control
Not analysed yet 26 Jan 2020
CVE-2019-15282 CVE record

CVSS 4.3 Medium

Cisco Identity Services Engine Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- Authentication bypass
Not analysed yet 16 Oct 2019