Known vulnerabilities in Cisco Identity Services Engine (ISE) - page 6

Software CPE: cpe:2.3:a:cisco_systems:cisco_identity_services_engine:*:*:*:*:*:*:*:*
Total vulnerabilities: 173
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Identity Services Engine (ISE) Cisco Identity Services Engine (ISE) is affected by 173 known vulnerabilities: 3 critical, 3 high, 34 medium, 133 low Critical High Medium Low

Vulnerabilities (173)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20959
CWE-79 Low
No
No
2.7P8, 3.0P7, 3.1P4, 3.2P1 20.10.2022 SB2022102022
#VU68522 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20822
CWE-22 Medium
No
No
3.1P5, 3.2P1 20.10.2022 SB2022102021
#VU66110 - Exposure of sensitive information to an unauthorized actor
CVE-2022-20914
CWE-200 Low
No
No
2.6P11, 2.7P8, 3.0P6, 3.1P3 04.08.2022 SB2022080428
#VU65729 - Insufficient Session Expiration
CWE-613 Low
No
No
2.7P5, 3.0P3 22.07.2022 SB2022072217
#VU64445 - Incorrect Privilege Assignment
CVE-2022-20819
CWE-266 Medium
No
No
2.4.0.357P11, 2.6.0.156P5, 2.7.0.305 16.06.2022 SB2022061616
#VU64444 - Improper Authentication
CVE-2022-20733
CWE-287 Medium
No
No
3.1P3 16.06.2022 SB2022061615
#VU61939 - Incorrect Privilege Assignment
CVE-2022-20782
CWE-266 Low
No
No
2.6P11, 2.7P7, 3.0P5, 3.1P1 06.04.2022 SB2022040624
#VU60963 - Resource Management Errors
CVE-2022-20756
CWE-399 Medium
No
No
2.6P11, 2.7P6, 3.0P5, 3.1P1 02.03.2022 SB2022030220
#VU57593 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-40121
CWE-79 Low
No
No
2.6P10, 2.7P5, 3.0P3 21.10.2021 SB2021102133
#VU57592 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-34738
CWE-79 Low
No
No
2.6P10, 2.7P5, 3.0P4 21.10.2021 SB2021102132
#VU57591 - Incorrect Privilege Assignment
CVE-2021-40123
CWE-266 Low
No
No
2.6P10, 2.7P5, 3.0P4 21.10.2021 SB2021102132
#VU57110 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34702
CWE-200 Low
No
No
2.7P5, 3.0P4 07.10.2021 SB2021100708
#VU57109 - Incorrect Privilege Assignment
CVE-2021-1594
CWE-266 Medium
No
No
2.6P10, 2.7P5, 3.1 07.10.2021 SB2021100707
#VU57108 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-34706
CWE-611 Medium
No
No
- 07.10.2021 SB2021100706
#VU56248 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-34759
CWE-79 Low
No
No
2.6P10 01.09.2021 SB2021090134
#VU54612 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1607
CWE-79 Low
No
No
2.6P9, 2.7P4, 3.0P3 08.07.2021 SB2021070811
#VU54611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1606
CWE-79 Low
No
No
2.6P9, 2.7P4, 3.0P3 08.07.2021 SB2021070811
#VU54610 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1605
CWE-79 Low
No
No
2.6P9, 2.7P4, 3.0P3 08.07.2021 SB2021070811
#VU54609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1604
CWE-79 Low
No
No
2.6P9, 2.7P4, 3.0P3 08.07.2021 SB2021070811
#VU54608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1603
CWE-79 Low
No
No
2.6P9, 2.7P4, 3.0P3 08.07.2021 SB2021070811


Showing elements 101 - 120 out of 173