Known vulnerabilities in Cisco Identity Services Engine (ISE) - page 7

Software CPE: cpe:2.3:a:cisco_systems:cisco_identity_services_engine:*:*:*:*:*:*:*:*
Total vulnerabilities: 173
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Identity Services Engine (ISE) Cisco Identity Services Engine (ISE) is affected by 173 known vulnerabilities: 3 critical, 3 high, 34 medium, 133 low Critical High Medium Low

Vulnerabilities (173)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53411 - External Control of File Name or Path
CVE-2021-1306
CWE-73 Low
No
No
2.7P4, 3.0P2, 3.1 21.05.2021 SB2021052107
#VU50778 - Incorrect Privilege Assignment
CVE-2021-1416
CWE-266 Low
No
No
2.4P14, 2.6P9, 2.7P3, 3.0P2 17.02.2021 SB2021021714
#VU50777 - Incorrect Privilege Assignment
CVE-2021-1412
CWE-266 Low
No
No
2.4P14, 2.6P9, 2.7P3, 3.0P2 17.02.2021 SB2021021714
#VU48156 - Incorrect Privilege Assignment
CVE-2020-27122
CWE-266 Low
No
No
3.0 05.11.2020 SB2020110537
#VU48155 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3551
CWE-79 Low
No
No
3.0.0.458 05.11.2020 SB2020110536
#VU48154 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26083
CWE-79 Low
No
No
- 05.11.2020 SB2020110535
#VU47522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3589
CWE-79 Low
No
No
2.2P17, 2.4p13 08.10.2020 SB2020101303
#VU47523 - Improper Authorization
CVE-2020-3467
CWE-285 Medium
No
No
2.4p13, 2.6p7, 2.7p2 08.10.2020 SB2020101302
#VU34089 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3525
CWE-200 Low
No
No
2.7p2 06.08.2020 SB2020080608
#VU29446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3340
CWE-79 Low
No
No
2.6P7 02.07.2020 SB2020070201
#VU25785 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3157
CWE-79 Low
No
No
- 05.03.2020 SB2020030509
#VU25476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3156
CWE-79 Low
No
No
- 20.02.2020 SB2020022006
#VU25006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3149
CWE-79 Low
No
No
2.7 06.02.2020 SB2020020607
#VU24159 - Improper Authorization
CVE-2019-15255
CWE-285 Medium
No
No
2.2P16 09.01.2020 SB2020010910
#VU22893 - Missing Authentication for Critical Function
CVE-2019-15282
CWE-306 Low
No
No
2.4P10 21.11.2019 SB2019101612
#VU22892 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12631
CWE-79 Low
No
No
2.4P10, 2.6P3, 2.7 21.11.2019 SB2019100210
#VU22891 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15281
CWE-79 Low
No
No
2.4P10 21.11.2019 SB2019101612
#VU22890 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12638
CWE-79 Low
No
No
2.3P7, 2.4P10 21.11.2019 SB2019101612
#VU22888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12637
CWE-79 Low
No
No
2.3P7, 2.4P10 21.11.2019 SB2019101612
#VU20869 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12644
CWE-79 Low
No
No
2.6.0 05.09.2019 SB2019090509


Showing elements 121 - 140 out of 173