Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-6323
HistoryJan 15, 2016 - 3:59 a.m.

CVE-2015-6323

2016-01-1503:59:06
[email protected]
web.nvd.nist.gov
23
cisco
ise
admin portal
remote access
cve-2015-6323
security vulnerability
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.5%

JSON

The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253.

Affected configurations

NVD
Node
ciscoidentity_services_engine_softwareMatch1.1.1
OR
ciscoidentity_services_engine_softwareMatch1.1.1p1
OR
ciscoidentity_services_engine_softwareMatch1.1.1p2
OR
ciscoidentity_services_engine_softwareMatch1.1.1p3
OR
ciscoidentity_services_engine_softwareMatch1.1.1p4
OR
ciscoidentity_services_engine_softwareMatch1.1.1p5
OR
ciscoidentity_services_engine_softwareMatch1.1.1p6
OR
ciscoidentity_services_engine_softwareMatch1.1.2
OR
ciscoidentity_services_engine_softwareMatch1.1.2p1
OR
ciscoidentity_services_engine_softwareMatch1.1.2p2
OR
ciscoidentity_services_engine_softwareMatch1.1.2p3
OR
ciscoidentity_services_engine_softwareMatch1.1.2p4
OR
ciscoidentity_services_engine_softwareMatch1.1.2p5
OR
ciscoidentity_services_engine_softwareMatch1.1.2p6
OR
ciscoidentity_services_engine_softwareMatch1.1.2p7
OR
ciscoidentity_services_engine_softwareMatch1.1.2p8
OR
ciscoidentity_services_engine_softwareMatch1.1.2p9
OR
ciscoidentity_services_engine_softwareMatch1.1.3
OR
ciscoidentity_services_engine_softwareMatch1.1.3p1
OR
ciscoidentity_services_engine_softwareMatch1.1.3p2
OR
ciscoidentity_services_engine_softwareMatch1.1.3p3
OR
ciscoidentity_services_engine_softwareMatch1.1.3p4
OR
ciscoidentity_services_engine_softwareMatch1.1.3p5
OR
ciscoidentity_services_engine_softwareMatch1.1.3p6
OR
ciscoidentity_services_engine_softwareMatch1.1.3p7
OR
ciscoidentity_services_engine_softwareMatch1.1.4
OR
ciscoidentity_services_engine_softwareMatch1.1.4p1
OR
ciscoidentity_services_engine_softwareMatch1.1.4p2
OR
ciscoidentity_services_engine_softwareMatch1.1.4p3
OR
ciscoidentity_services_engine_softwareMatch1.1.4p4
OR
ciscoidentity_services_engine_softwareMatch1.1.4p5
OR
ciscoidentity_services_engine_softwareMatch1.1.4p6
OR
ciscoidentity_services_engine_softwareMatch1.1.4p7
OR
ciscoidentity_services_engine_softwareMatch1.1_base
OR
ciscoidentity_services_engine_softwareMatch1.2\(0.747\)
OR
ciscoidentity_services_engine_softwareMatch1.2\(0.793\)
OR
ciscoidentity_services_engine_softwareMatch1.2\(1.198\)
OR
ciscoidentity_services_engine_softwareMatch1.2\(1.901\)
OR
ciscoidentity_services_engine_softwareMatch1.2.0.899p14
OR
ciscoidentity_services_engine_softwareMatch1.2.1
OR
ciscoidentity_services_engine_softwareMatch1.2.1p1
OR
ciscoidentity_services_engine_softwareMatch1.2.1p2
OR
ciscoidentity_services_engine_softwareMatch1.2_base
OR
ciscoidentity_services_engine_softwareMatch1.3\(0.722\)
OR
ciscoidentity_services_engine_softwareMatch1.3\(0.876\)
OR
ciscoidentity_services_engine_softwareMatch1.3\(106.146\)
OR
ciscoidentity_services_engine_softwareMatch1.3\(120.135\)
OR
ciscoidentity_services_engine_softwareMatch1.4\(0.109\)
OR
ciscoidentity_services_engine_softwareMatch1.4\(0.181\)
OR
ciscoidentity_services_engine_softwareMatch1.4\(0.253\)
CPENameOperatorVersion
cisco:identity_services_engine_softwarecisco identity services engine softwareeq1.1.1
cisco:identity_services_engine_softwarecisco identity services engine softwareeq1.1.2
cisco:identity_services_engine_softwarecisco identity services engine softwareeq1.1.3
cisco:identity_services_engine_softwarecisco identity services engine softwareeq1.1.4
cisco:identity_services_engine_softwarecisco identity services engine softwareeq1.1_base
cisco:identity_services_engine_softwarecisco identity services engine softwareeq1.2\(0.747\)
cisco:identity_services_engine_softwarecisco identity services engine softwareeq1.2\(0.793\)
cisco:identity_services_engine_softwarecisco identity services engine softwareeq1.2\(1.198\)
cisco:identity_services_engine_softwarecisco identity services engine softwareeq1.2\(1.901\)
cisco:identity_services_engine_softwarecisco identity services engine softwareeq1.2.0.899
Rows per page:
1-10 of 191

Related

cisco 1
openvas 1
cvelist 1
nvd 1
prion 1
nessus 1
cisco
cisco
Cisco Identity Services Engine Unauthorized Access Vulnerability
2016-01-13 16:00:00
openvas
openvas
Cisco Identity Services Engine Unauthorized Access Vulnerability
2016-01-14 00:00:00
cvelist
cvelist
CVE-2015-6323
2016-01-15 02:00:00
nvd
nvd
CVE-2015-6323
2016-01-15 03:59:06
prion
prion
Code injection
2016-01-15 03:59:00
nessus
nessus
Cisco Identify Services Engine (ISE) Admin Portal Unauthorized Access
2017-03-01 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.5%

JSON
Related for CVE-2015-6323
cisco1openvas1cvelist1nvd1prion1nessus1