CVE-2026-23927

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session...

PT-2011-4372

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE versions prior to 1.0.4.MR2 Description The issue allows remote attackers to modify settings or perform other administrative actions due to default Oracle database credentials. Recommendations For versions...