Known vulnerabilities in Cisco Identity Services Engine (ISE) - page 9

Software CPE: cpe:2.3:a:cisco_systems:cisco_identity_services_engine:*:*:*:*:*:*:*:*
Total vulnerabilities: 215
Public exploits: 4
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Identity Services Engine (ISE) Cisco Identity Services Engine (ISE) is affected by 215 known vulnerabilities: 7 critical, 8 high, 42 medium, 158 low Critical High Medium Low

Vulnerabilities (215)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU54612 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1607
CWE-79 Low
No
No
2.6P9, 2.7P4, 3.0P3 08.07.2021 SB2021070811
#VU54611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1606
CWE-79 Low
No
No
2.6P9, 2.7P4, 3.0P3 08.07.2021 SB2021070811
#VU53411 - External Control of File Name or Path
CVE-2021-1306
CWE-73 Low
No
No
2.7P4, 3.0P2, 3.1 21.05.2021 SB2021052107
#VU50778 - Incorrect Privilege Assignment
CVE-2021-1416
CWE-266 Low
No
No
2.4P14, 2.6P9, 2.7P3, 3.0P2 17.02.2021 SB2021021714
#VU50777 - Incorrect Privilege Assignment
CVE-2021-1412
CWE-266 Low
No
No
2.4P14, 2.6P9, 2.7P3, 3.0P2 17.02.2021 SB2021021714
#VU48156 - Incorrect Privilege Assignment
CVE-2020-27122
CWE-266 Low
No
No
3.0 05.11.2020 SB2020110537
#VU48155 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3551
CWE-79 Low
No
No
3.0.0.458 05.11.2020 SB2020110536
#VU48154 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26083
CWE-79 Low
No
No
- 05.11.2020 SB2020110535
#VU47522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3589
CWE-79 Low
No
No
2.2P17, 2.4p13 08.10.2020 SB2020101303
#VU47523 - Improper Authorization
CVE-2020-3467
CWE-285 Medium
No
No
2.4p13, 2.6p7, 2.7p2 08.10.2020 SB2020101302
#VU34089 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3525
CWE-200 Low
No
No
2.7p2 06.08.2020 SB2020080608
#VU29446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3340
CWE-79 Low
No
No
2.6P7 02.07.2020 SB2020070201
#VU25785 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3157
CWE-79 Low
No
No
- 05.03.2020 SB2020030509
#VU25476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3156
CWE-79 Low
No
No
- 20.02.2020 SB2020022006
#VU25006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3149
CWE-79 Low
No
No
2.7 06.02.2020 SB2020020607
#VU24159 - Improper Authorization
CVE-2019-15255
CWE-285 Medium
No
No
2.2P16 09.01.2020 SB2020010910
#VU22892 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12631
CWE-79 Low
No
No
2.4P10, 2.6P3, 2.7 21.11.2019 SB2019100210
#VU22890 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12638
CWE-79 Low
No
No
2.3P7, 2.4P10 21.11.2019 SB2019101612
#VU19247 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-1942
CWE-89 Medium
No
No
- 18.07.2019 SB2019071717
#VU1085 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2016-6453
CWE-89 Medium
No
No
- 26.10.2016 SB2016102619
SB2024071250


Showing elements 161 - 180 out of 215