Skip to content

Cisco Identity Services Engine vulnerabilities

cisco identity services engine softwareCross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows...CVE-2016-14856.1 MediumAugust 22, 2016
cisco identity services engine softwareThe Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2...CVE-2016-14027.5 HighMay 21, 2016
cisco identity services engine softwareCisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass...CVE-2015-63176.5 MediumJanuary 23, 2016
cisco identity services engine softwareThe Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1...CVE-2015-63239.8 CriticalJanuary 15, 2016
cisco identity services engine softwareThe guest portal in Cisco Identity Services Engine (ISE) 3300 1.2(0.899) does not restrict access...CVE-2015-62665.0 MediumAugust 28, 2015
cisco identity services engine softwareThe web interface in Cisco Identity Services Engine (ISE) 1.1(4.1), 1.3(106.146), and 1.3(120.135...CVE-2015-42664.3 MediumJuly 16, 2015
cisco identity services engine softwareCross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services...CVE-2015-42676.8 MediumJuly 15, 2015
cisco identity services engine softwareMultiple cross-site scripting (XSS) vulnerabilities in the Infra Admin UI in Cisco Identity...CVE-2015-42684.3 MediumJuly 14, 2015
cisco secure access control system, identity services engine software +1 moreCisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity...CVE-2015-42194.0 MediumJune 24, 2015
cisco identity services engine softwareThe administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote...CVE-2015-41825.5 MediumJune 12, 2015
cisco identity services engine softwareThe web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not...CVE-2015-07575.0 MediumMay 29, 2015
cisco identity services engine softwareMultiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow...CVE-2014-80224.3 MediumJanuary 15, 2015
cisco identity services engine softwareThe periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to...CVE-2014-80175.0 MediumDecember 22, 2014
cisco identity services engine softwareThe Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to...CVE-2014-80154.0 MediumDecember 22, 2014
cisco identity services engine softwareCisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle...CVE-2014-32764.0 MediumMay 23, 2014
cisco identity services engine softwareSQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(.1...CVE-2014-32756.5 MediumMay 23, 2014
cisco identity services engine softwareCross-site scripting (XSS) vulnerability in Cisco Identity Services Engine (ISE) 1.2 patch 2 and...CVE-2014-06814.3 MediumJanuary 29, 2014
cisco identity services engineCross-site scripting (XSS) vulnerability in the HTTP control interface in the NAC Web Agent...CVE-2014-06804.3 MediumJanuary 29, 2014
cisco identity services engine softwareThe RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify...CVE-2014-06654.0 MediumJanuary 15, 2014
cisco identity services engine softwareCisco Identity Services Engine (ISE) 1.x before 1.1.1 allows remote attackers to bypass...CVE-2013-55315.0 MediumOctober 25, 2013
cisco identity services engine softwareThe web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1...CVE-2013-55309.0 HighOctober 25, 2013
cisco identity services engine softwareCisco Identity Services Engine does not properly restrict the creation of guest accounts, which...CVE-2013-55215.0 MediumOctober 25, 2013
cisco identity services engine, identity services engine software +1 moreCross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services...CVE-2013-55413.5 LowOctober 16, 2013
cisco identity services engine, identity services engine software +1 moreThe file-upload feature in Cisco Identity Services Engine (ISE) allows remote authenticated users...CVE-2013-55406.8 MediumOctober 16, 2013
cisco identity services engine, identity services engine software +1 moreThe upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote...CVE-2013-55396.0 MediumOctober 16, 2013
cisco identity services engine, identity services engine software +1 moreThe Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded...CVE-2013-55385.0 MediumOctober 16, 2013
cisco identity services engine softwareSQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and...CVE-2013-55256.5 MediumOctober 10, 2013
cisco identity services engine softwareCross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services...CVE-2013-55244.3 MediumOctober 10, 2013
cisco identity services engine softwareThe Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly...CVE-2013-55234.3 MediumOctober 10, 2013
cisco identity services engine softwareCross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services...CVE-2013-55054.3 MediumSeptember 30, 2013
cisco identity services engine softwareCross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco...CVE-2013-55044.3 MediumSeptember 30, 2013
cisco identity services engine softwareMultiple cross-site scripting (XSS) vulnerabilities in the guest portal in Cisco Identity...CVE-2012-57444.3 MediumAugust 30, 2013
cisco identity services engine softwareThe captive portal application in Cisco Identity Services Engine (ISE) allows remote attackers to...CVE-2013-34714.3 MediumAugust 29, 2013
cisco identity services engineThe firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports,...CVE-2013-34455.0 MediumJuly 26, 2013
cisco identity services engine, identity services engine software +1 moreCross-site request forgery (CSRF) vulnerability in the web framework on the Cisco Identity...CVE-2013-34206.8 MediumJuly 17, 2013
cisco identity services engine softwareCross-site scripting (XSS) vulnerability in the search form in the administration/monitoring...CVE-2013-34134.3 MediumJuly 4, 2013
cisco application networking manager, context directory agent, identity services engine software +8 more +10 moreThe command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine...CVE-2013-11966.8 MediumApril 29, 2013
cisco application networking manager, context directory agent, identity services engine software +7 more +9 moreThe command-line interface in Cisco Identity Services Engine Software, Secure Access Control...CVE-2013-11256.8 MediumFebruary 19, 2013
cisco identity services engine, identity services engine software +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user...CVE-2012-39086.8 MediumSeptember 16, 2012
cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials,...CVE-2011-329010.0 HighSeptember 21, 2011