Known vulnerabilities in Cisco Identity Services Engine (ISE) - page 3

Software CPE: cpe:2.3:a:cisco_systems:cisco_identity_services_engine:*:*:*:*:*:*:*:*
Total vulnerabilities: 173
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Identity Services Engine (ISE) Cisco Identity Services Engine (ISE) is affected by 173 known vulnerabilities: 3 critical, 3 high, 34 medium, 133 low Critical High Medium Low

Vulnerabilities (173)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100045 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20532
CWE-22 Low
No
No
3.2P7, 3.3P4, 3.4P1 07.11.2024 SB2024110724
#VU100044 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-20531
CWE-611 Low
No
No
3.2P7, 3.3P4, 3.4P1 07.11.2024 SB2024110724
#VU100043 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20530
CWE-79 Low
No
No
3.2P7, 3.3P4, 3.4P1 07.11.2024 SB2024110724
#VU100039 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20527
CWE-22 Low
No
No
3.2P7, 3.3P4, 3.4P1 07.11.2024 SB2024110724
#VU100037 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20525
CWE-79 Low
No
No
3.2P7, 3.3P4, 3.4P1 07.11.2024 SB2024110724
#VU100034 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20487
CWE-79 Low
No
No
3.2P7, 3.3P4 07.11.2024 SB2024110727
#VU100033 - Client-Side Enforcement of Server-Side Security
CVE-2024-20476
CWE-602 Low
No
No
3.2P7, 3.3P4 07.11.2024 SB2024110727
#VU100030 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20539
CWE-79 Low
No
No
3.1P9, 3.2P7, 3.3P3 07.11.2024 SB2024110726
#VU100001 - Incorrect Authorization
CVE-2024-20537
CWE-863 Medium
No
No
3.1P9, 3.2P7, 3.3P3 07.11.2024 SB2024110726
#VU98020 - Missing Encryption of Sensitive Data
CVE-2024-20515
CWE-311 Medium
No
No
3.1P9, 3.2P7, 3.3P3 03.10.2024 SB2024100335
#VU96861 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20469
CWE-78 Low
No
No
3.2P7 05.09.2024 SB2024090548
#VU96378 - Cross-Site Request Forgery (CSRF)
CVE-2024-20486
CWE-352 Medium
No
No
3.1P9, 3.3P3, 3.4 21.08.2024 SB20240821124
#VU96377 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-20417
CWE-89 Low
No
No
3.4 21.08.2024 SB20240821124
#VU96376 - Exposure of sensitive information to an unauthorized actor
CVE-2024-20466
CWE-200 Low
No
No
3.2P5, 3.3P2 21.08.2024 SB20240821124
#VU95570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20479
CWE-79 Low
No
No
3.1P9, 3.3P3 08.08.2024 SB2024080850
#VU95565 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20443
CWE-79 Low
No
No
3.1P9, 3.3P3 08.08.2024 SB2024080850
#VU94514 - Unrestricted Upload of File with Dangerous Type
CVE-2024-20296
CWE-434 Low
No
No
3.3P3 18.07.2024 SB2024071811
#VU88128 - Cross-Site Request Forgery (CSRF)
CVE-2024-20368
CWE-352 Low
No
No
3.2P5 04.04.2024 SB2024040427
#VU88126 - Server-Side Request Forgery (SSRF)
CVE-2024-20332
CWE-918 Low
No
No
3.2P5 04.04.2024 SB2024040427
#VU85297 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20251
CWE-79 Low
No
No
3.1P8, 3.3P1 11.01.2024 SB2024011116


Showing elements 41 - 60 out of 173