CVE-2012-3908

Cisco advisory CISCO-SA-20120920-CVE-2012-3908 describes CSRF vulnerabilities in the ISE Administrator UI (Tomcat-based) on Cisco Identity Services Engine 3300-series appliances prior to 1.1.0.665 Patch 1. An unauthenticated, remote attacker could trick an authorized user into following a malicio...

CVE-2011-3290

Cisco Identity Services Engine (ISE) prior to 1.0.4.MR2 is affected by CVE-2011-3290 due to default Oracle database credentials. The underlying cause is hard-coded/default credentials in the ISE database, enabling a remote attacker to modify configuration and perform administrative actions withou...