Lucene search
+L

2147 matches found

Cvelist
Cvelist
•added 2025/07/16 4:16 p.m.•31 views

CVE-2025-20283 Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root. This vulnerability is due to insufficient validation of user-supplied input. An attacker with valid credentials coul...

6.5CVSS0.1321EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/16 4:16 p.m.•60 views

CVE-2025-20283

The vulnerability (CVE-2025-20283) affects Cisco Identity Services Engine (ISE) and ISE-PIC via a specific API, caused by insufficient validation of user-supplied input. An attacker with valid high-priv credentials could submit crafted API requests to execute commands as root on the underlying OS...

7.2CVSS7.5AI score0.1321EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2025/07/16 4:00 p.m.•41 views

Cisco Identity Services Engine Authenticated Remote Code Execution and Authorization Bypass Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to issue commands on the underlying operating system as the root user and allow IP access filters to be bypassed. Cisco has released softwa...

6.5CVSS7.3AI score0.2512EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2025/07/16 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-20085

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability is due to...

6.1CVSS6.1AI score0.00737EPSS
SaveIn wildExploits0References2
CNNVD
CNNVD
•added 2025/07/16 12:00 a.m.•19 views

Cisco ISE和Cisco ISE-PIC 注入漏洞

Cisco ISE and Cisco ISE-PIC are both products of the U.S. Cisco Cisco.Cisco ISE is the identity services engine introduced by Cisco, mainly used for network access control and security management.Cisco ISE-PIC is the passive identity connector of the Cisco Identity Services Engine, which is mainl...

10CVSS8.4AI score0.74499EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/07/16 12:00 a.m.•25 views

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-unauth-rce-ZAd2GnJ6)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not...

10CVSS8.8AI score0.97601EPSS
SaveExploits10References6
Tenable Nessus
Tenable Nessus
•added 2025/07/16 12:00 a.m.•24 views

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-multi-3VpsXOxO)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root. This vulnerability is d...

7.2CVSS6.4AI score0.2512EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/07/16 12:00 a.m.•16 views

Cisco ISE和Cisco ISE-PIC 注入漏洞

Cisco ISE and Cisco ISE-PIC are both products of Cisco, Inc.Cisco ISE is a NAC solution. It is used to manage access to network resources by endpoints, users, and devices in a zero-trust architecture.Cisco ISE-PIC is a component ... An injection vulnerability exists in Cisco ISE and Cisco ISE-PIC...

7.2CVSS7.1AI score0.1321EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/07/16 12:00 a.m.•10 views

Cisco Identity Services Engine (cisco-sa-ise-multi-3VpsXOxO)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured IP access restrictions and log in to the device from a...

4.1CVSS5.7AI score0.00454EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2025/07/09 12:00 a.m.•19 views

Cisco ISE Passive Identity Connector Arbitrary File Load

The vulnerability of the application software interface of the Cisco Identity Services Engine ISE and the Cisco ISE Passive Identity Connector ISE-PIC, which acts as a virtual authentication data collection device, is related to deficiencies in access control. Exploiting this vulnerability could...

6.8CVSS6AI score0.00508EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/07/09 12:00 a.m.•18 views

Cisco Identity Services Engine Code Execution

The vulnerability of the Cisco Identity Services Engine ISE platform-related network policy management platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS9.1AI score0.97601EPSS
SaveExploits10References3Affected Software1
GithubExploit
GithubExploit
•added 2025/07/06 1:20 p.m.•280 views

Exploit for Injection in Cisco Identity_Services_Engine

CVE-2025-20281 — Cisco ISE Critical RCE Vulnerability 🛑...

10CVSS8.9AI score0.97601EPSS
SaveExploits10
GithubExploit
GithubExploit
•added 2025/07/04 2:59 p.m.•158 views

Exploit for Injection in Cisco Identity_Services_Engine

CVE-2025-20281 — Cisco ISE ERS API Unauthenticated RCE Exploit...

10CVSS9AI score0.97601EPSS
SaveExploits10
CNVD
CNVD
•added 2025/07/04 12:00 a.m.•21 views

Cisco Identity Services Engine Authorization Issues Vulnerability (CNVD-2025-15609)

Cisco Identity Services Engine Cisco ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users, and devices, and develops and enforces policies to regulate the network. Cisco Identity Services Engine Cisco ISE...

6.4CVSS6.8AI score0.00355EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/07/03 2:10 a.m.•342 views

Exploit for Injection in Cisco Identity_Services_Engine

CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This scr...

10CVSS9.3AI score0.97601EPSS
SaveExploits10
GithubExploit
GithubExploit
•added 2025/06/27 9:07 p.m.•194 views

Exploit for Injection in Cisco Identity_Services_Engine

CVE-2025-20281-2-Cisco-ISE-RCE Unauthenticated Python PoC for...

10CVSS8.7AI score0.97601EPSS
SaveExploits10
RedhatCVE
RedhatCVE
•added 2025/06/27 4:21 p.m.•17 views

CVE-2025-20264

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to bypass the authorization mechanisms for specific administrative functions. This vulnerability is due to insufficient authorization enforcement mechanisms fo...

6.4CVSS7.3AI score0.00355EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/06/27 12:00 a.m.•23 views

Cisco ISE RCE

The vulnerability of the private application programming interface of the Cisco Identity Services Engine ISE management platform is related to the absence of a mechanism for checking uploaded files. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary...

10CVSS8.5AI score0.38719EPSS
SaveExploits3References3Affected Software1
OpenVAS
OpenVAS
•added 2025/06/27 12:00 a.m.•25 views

Cisco Identity Services Engine (ISE) Detection Consolidation

Consolidation of Cisco Identity Services Engine ISE detections. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if...

7.3AI score
SaveExploits0References1
CNVD
CNVD
•added 2025/06/26 12:00 a.m.•11 views

Cisco ISE and ISE-PIC Injection Vulnerabilities

Cisco ISE and Cisco ISE-PIC are both products of the U.S. Cisco Cisco.Cisco ISE is the identity services engine introduced by Cisco, mainly used for network access control and security management.Cisco ISE-PIC is the passive identity connector of the Cisco Identity Services Engine, which is mainl...

10CVSS8.8AI score0.97601EPSS
SaveExploits10References1
Rows per page
Query Builder