Known vulnerabilities in Cisco Identity Services Engine (ISE) - page 2

Software CPE: cpe:2.3:a:cisco_systems:cisco_identity_services_engine:*:*:*:*:*:*:*:*
Total vulnerabilities: 173
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Identity Services Engine (ISE) Cisco Identity Services Engine (ISE) is affected by 173 known vulnerabilities: 3 critical, 3 high, 34 medium, 133 low Critical High Medium Low

Vulnerabilities (173)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113736 - Incorrect Authorization
CVE-2025-20332
CWE-863 Medium
No
No
3.1p10, 3.3P4, 3.4P1 07.08.2025 SB2025080725
#VU113732 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20331
CWE-79 Low
No
No
3.1p10, 3.3P4 07.08.2025 SB2025080725
#VU113027 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-20337
CWE-74 Critical
Available
Exploited
3.3 Patch 6, 3.4 Patch 2 17.07.2025 SB2025062525
#VU113015 - Authentication Bypass by Assumed-Immutable Data
CVE-2025-20285
CWE-302 Low
No
No
3.3 Patch 7, 3.4 Patch 2 17.07.2025 SB2025071716
#VU113014 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-20284
CWE-74 Low
No
No
3.3 Patch 7, 3.4 Patch 2 17.07.2025 SB2025071716
#VU113013 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-20283
CWE-74 Low
No
No
3.3 Patch 7, 3.4 Patch 2 17.07.2025 SB2025071716
#VU111941 - Improper Authorization
CVE-2025-20264
CWE-285 Medium
No
No
3.2 P8, 3.3P5, 3.4 Patch 2 25.06.2025 SB2025062526
#VU111940 - Unrestricted Upload of File with Dangerous Type
CVE-2025-20282
CWE-434 Critical
No
No
3.4 Patch 2 25.06.2025 SB2025062525
#VU111939 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-20281
CWE-74 Critical
Available
Exploited
3.3 Patch 6, 3.4 Patch 2 25.06.2025 SB2025062525
#VU110217 - Use of Hard-coded Password
CVE-2025-20286
CWE-259 High
No
No
- 05.06.2025 SB2025060528
#VU110216 - Improper Access Control
CVE-2025-20130
CWE-284 Low
No
No
3.1 P10, 3.2 P7, 3.3 P3 05.06.2025 SB2025060527
#VU109643 - Out-of-bounds read
CVE-2025-20152
CWE-125 High
No
No
3.4P1 22.05.2025 SB2025052218
#VU109642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20267
CWE-79 Low
No
No
3.3P5, 3.4P1 22.05.2025 SB2025052218
#VU103665 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20205
CWE-79 Low
No
No
3.2P7, 3.3P4, 3.4P1 06.02.2025 SB2025020615
#VU103664 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20204
CWE-79 Low
No
No
3.3P3, 3.4P1 06.02.2025 SB2025020614
#VU103658 - Improper Authorization
CVE-2025-20125
CWE-285 Medium
Available
No
3.1p10, 3.2P7, 3.3P4 05.02.2025 SB2025020551
#VU103657 - Deserialization of Untrusted Data
CVE-2025-20124
CWE-502 Medium
Available
No
3.1p10, 3.2P7, 3.3P4 05.02.2025 SB2025020551
#VU100041 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20529
CWE-22 Low
No
No
3.2P7, 3.3P4 07.11.2024 SB2024110727
#VU100040 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20528
CWE-22 Low
No
No
3.2P7, 3.3P4 07.11.2024 SB2024110727
#VU100027 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20538
CWE-79 Low
No
No
3.2P7, 3.3P4 07.11.2024 SB2024110727


Showing elements 21 - 40 out of 173