Known vulnerabilities in Cisco Identity Services Engine (ISE) - page 2
Vendor:
Cisco Systems, Inc
Software:
Cisco Identity Services Engine (ISE)
Software CPE:
cpe:2.3:a:cisco_systems:cisco_identity_services_engine:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
215
Public exploits:
4
Known exploited (KEV):
3
Breakdown by Severity Chart
3.2.0.542-Patch8
3.3.0.430-Patch8
3.5.0.527-Patch3
3.1.0.518-Patch12
3.2.0.542-Patch11
3.3.0.430-Patch12
3.4.0.608-Patch7
3.5.0.527-Patch4
003.005(000.527)
003.006(000.351)
3.5 Patch 2
3.5 Patch 1
3.4 Patch 5
3.4 Patch 3
3.4 Patch 7
3.3 Patch 12
3.2 Patch 11
3.1 Patch 12
3.5 Patch 4
3.3 Patch 5
3.2 Patch 8
3.5 Patch 3
3.4 Patch 6
3.3 Patch 11
3.2 Patch 10
3.1 Patch 11
3.5
3.3 Patch 8
3.4 Patch 4
3.3 Patch 7
3.2 P8
3.3 Patch 6
3.4 Patch 2
003.001(000.518)
003.002(000.542)
003.003(000.430)
003.004(000.608)
3.3 P3
3.2 P7
3.1 P10
3.3P5
3.2P6
3.2P4
3.1p10
3.1p2
3.4P1
3.3P4
3.2P7
3.4
3.3P2
3.1P9
3.3P3
3.2P5
3.3P1
3.1P8
3.3
3.2P3
3.1p7
3.0p8
2.7p10
3.2P2
3.0.0.458-Patch7
3.2.0.542 Patch1
3.1p6
2.6P12
3.1P4
3.0P7
3.2P1
3.1P5
3.2
3.0P6
2.7P8
2.7.0.305
2.6.0.156P5
2.4.0.357P11
3.1P3
2.7 Patch 7
3.1P1
3.0 Patch 5
2.7 Patch 6
2.6 Patch 11
3.0 Patch 4
2.7 Patch 5
2.6 Patch 10
2.2 Patch 15
2.2 Patch 14
2.2 Patch 13
2.2 Patch 12
2.2 Patch 11
2.2 Patch 10
2.2 Patch 9
2.2 Patch 8
2.2 Patch 7
2.2 Patch 6
2.2 Patch 5
2.2 Patch 4
2.2 Patch 3
2.2 Patch 2
2.2 Patch 1
3.0 Patch 3
3.1
2.7 Patch 4
3.0P2
2.7P3
2.6 Patch 9
2.4 Patch 14
3.0 Patch 1
2.7 Patch 2
2.7 Patch 1
2.6 Patch 8
2.6 Patch 6
2.6 Patch 5
2.6 Patch 4
2.4 Patch 13
2.4 Patch 12
2.4 Patch 11
2.4 Patch 9
2.4 Patch 8
2.4 Patch 7
2.4 Patch 6
2.4 Patch 5
2.4 Patch 4
2.4 Patch 3
2.4 Patch 2
2.4 Patch 1
2.3 Patch 5
2.3 Patch 4
2.3 Patch 3
2.3 Patch 2
2.3 Patch 1
2.6(0.905)
3.0
3.0(0.458)
3.0(0.395)
2.7(0.356)
2.6
2.5
2.4
2.3
2.3p7
2.4p12
2.6p7
2.4p13
2.2 Patch 17
2.4(0.911)
2.3(0.906)
2.6(0.902)
2.7p2
2.6(0.907)
2.4(0.913)
2.2(0.917)
2.6 Patch 7
2.7.0 FCS
2.6 Patch 2
2.6 Patch 1
2.2 Patch 16
2.7
2.6 Patch 3
2.3 Patch 6
2.3 Patch 7
2.4 Patch 10
2.5(0.225)
2.6.0
2.4.0 Patch 9
2.3(0.904)
2.6(0.156)
2.5(0.353)
2.4(0.901.1)
2.4(0.901)
2.2(0.911)
2.4(0.904)
2.5(0.1)
2.4(0.902)
2.4(0.903)
2.3(0.905)
2.2(0.913)
2.4(100.159)
2.2(0.910)
2.2(1.901)
2.4(0.183)
2.2(0.231)
2.1(0.188)
2.0(0.901)
2.1(0.905)
2.4(0.223)
2.4(0.357)
2.0(1.130)
2.0(0.306)
2.2(0.905)
2.4(0.192)
2.2(0.903)
2.0(0.249)
2.0(0.234)
2.1(102.103)
2.2(0.470)
2.4(0.247)
2.2(1.145)
2.1(0.474)
2.4(0.126)
2.3(0.298)
2.2(0.904)
2.2(0.471)
2.1(0.904)
2.1(0.229)
2.0.1
2.3(0.151)
2.2(0.283)
1.3(0.909)
2.1(102.101)
2.1(0.800)
2.2
2.1.0
2.0.0
1.4
1.2
1.1
1.3
Vulnerabilities (215)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU150706 - Incorrect Resource Transfer Between Spheres CVE-2026-20194 |
CWE-669 | High | 3.1 Patch 12, 3.2 Patch 11, 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917238 |
||
| #VU150707 - Insufficiently Protected Credentials CVE-2026-20234 |
CWE-522 | High | 3.1 Patch 12, 3.2 Patch 11, 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917238 |
||
| #VU150708 - Improper input validation CVE-2026-20237 |
CWE-20 | High | 3.1 Patch 12, 3.2 Patch 11, 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917238 |
||
| #VU150709 - Improper Privilege Management CVE-2026-20287 |
CWE-269 | High | 3.1 Patch 12, 3.2 Patch 11, 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917238 |
||
| #VU150705 - Improper Access Control CVE-2026-20192 |
CWE-284 | Critical | 3.1 Patch 12, 3.2 Patch 11, 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917238 |
||
| #VU150702 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2026-76427 |
CWE-611 | Low | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917237 |
||
| #VU150703 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-76428 |
CWE-89 | Low | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917237 |
||
| #VU150698 - Missing Authorization CVE-2026-76423 |
CWE-862 | Critical | 3.1 Patch 12, 3.2 Patch 11, 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917237 |
||
| #VU150699 - Relative Path Traversal CVE-2026-76424 |
CWE-23 | Low | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917237 |
||
| #VU150700 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-76425 |
CWE-89 | Low | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917237 |
||
| #VU150701 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-76426 |
CWE-89 | Low | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917237 |
||
| #VU150683 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-76433 |
CWE-22 | Medium | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917233 |
||
| #VU150684 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-76431 |
CWE-22 | Low | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917233 |
||
| #VU150685 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-76432 |
CWE-22 | Low | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917233 |
||
| #VU150686 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-76434 |
CWE-22 | Low | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917233 |
||
| #VU150679 - Missing Authentication for Critical Function CVE-2026-76439 |
CWE-306 | Medium | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917232 |
||
| #VU150680 - Missing Authentication for Critical Function CVE-2026-76444 |
CWE-306 | Medium | 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917232 |
||
| #VU150681 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2026-76446 |
CWE-611 | Low | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917232 |
||
| #VU150682 - Missing Authentication for Critical Function CVE-2026-76447 |
CWE-306 | Medium | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917232 |
||
| #VU150654 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-20247 |
CWE-89 | Medium | 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 | 17.09.2026 |
SB20260917224 |
Showing elements 21 - 40 out of 215