Known vulnerabilities in Cisco Identity Services Engine (ISE) - page 5

Software CPE: cpe:2.3:a:cisco_systems:cisco_identity_services_engine:*:*:*:*:*:*:*:*
Total vulnerabilities: 215
Public exploits: 4
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Identity Services Engine (ISE) Cisco Identity Services Engine (ISE) is affected by 215 known vulnerabilities: 7 critical, 8 high, 42 medium, 158 low Critical High Medium Low

Vulnerabilities (215)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100045 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20532
CWE-22 Low
No
No
3.2P7, 3.3P4, 3.4P1 07.11.2024 SB2024110724
#VU100044 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-20531
CWE-611 Low
No
No
3.2P7, 3.3P4, 3.4P1 07.11.2024 SB2024110724
#VU100043 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20530
CWE-79 Low
No
No
3.2P7, 3.3P4, 3.4P1 07.11.2024 SB2024110724
#VU100041 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20529
CWE-22 Low
No
No
3.2P7, 3.3P4 07.11.2024 SB2024110727
#VU100040 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20528
CWE-22 Low
No
No
3.2P7, 3.3P4 07.11.2024 SB2024110727
#VU100039 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20527
CWE-22 Low
No
No
3.2P7, 3.3P4, 3.4P1 07.11.2024 SB2024110724
#VU100037 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20525
CWE-79 Low
No
No
3.2P7, 3.3P4, 3.4P1 07.11.2024 SB2024110724
#VU100034 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20487
CWE-79 Low
No
No
3.2P7, 3.3P4 07.11.2024 SB2024110727
#VU100033 - Client-Side Enforcement of Server-Side Security
CVE-2024-20476
CWE-602 Low
No
No
3.2P7, 3.3P4 07.11.2024 SB2024110727
#VU100030 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20539
CWE-79 Low
No
No
3.1P9, 3.2P7, 3.3P3 07.11.2024 SB2024110726
#VU100001 - Incorrect Authorization
CVE-2024-20537
CWE-863 Medium
No
No
3.1P9, 3.2P7, 3.3P3 07.11.2024 SB2024110726
#VU98020 - Missing Encryption of Sensitive Data
CVE-2024-20515
CWE-311 Medium
No
No
3.1P9, 3.2P7, 3.3P3 03.10.2024 SB2024100335
#VU96861 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20469
CWE-78 Low
No
No
3.2P7 05.09.2024 SB2024090548
#VU96378 - Cross-Site Request Forgery (CSRF)
CVE-2024-20486
CWE-352 Medium
No
No
3.1P9, 3.3P3, 3.4 21.08.2024 SB20240821124
#VU96377 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-20417
CWE-89 Low
No
No
3.4 21.08.2024 SB20240821124
#VU96376 - Exposure of sensitive information to an unauthorized actor
CVE-2024-20466
CWE-200 Low
No
No
3.2P5, 3.3P2 21.08.2024 SB20240821124
#VU95570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20479
CWE-79 Low
No
No
3.1P9, 3.3P3 08.08.2024 SB2024080850
#VU95565 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20443
CWE-79 Low
No
No
3.1P9, 3.3P3 08.08.2024 SB2024080850
#VU94514 - Unrestricted Upload of File with Dangerous Type
CVE-2024-20296
CWE-434 Low
No
No
3.3P3 18.07.2024 SB2024071811
#VU88126 - Server-Side Request Forgery (SSRF)
CVE-2024-20332
CWE-918 Low
No
No
3.2P5 04.04.2024 SB2024040427


Showing elements 81 - 100 out of 215