Lucene search

K
CiscoIdentity Services Engine Software*

9 matches found

CVE
CVE
added 2019/10/16 7:15 p.m.77 views

CVE-2019-15282

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker read tcpdump files generated on an affected device. The vulnerability is due an issue in the authentication logic of the web-based management interf...

5.3CVSS4.9AI score0.01094EPSS
CVE
CVE
added 2014/05/26 12:25 a.m.49 views

CVE-2014-3275

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCul21337.

6.5CVSS8.1AI score0.00279EPSS
CVE
CVE
added 2013/10/10 10:55 a.m.46 views

CVE-2013-5523

The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" i...

4.3CVSS6.5AI score0.00545EPSS
CVE
CVE
added 2019/10/16 7:15 p.m.42 views

CVE-2019-15281

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The attacker must ha...

4.8CVSS4.8AI score0.0026EPSS
CVE
CVE
added 2011/09/21 4:55 p.m.41 views

CVE-2011-3290

Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135.

10CVSS6.8AI score0.01496EPSS
CVE
CVE
added 2013/10/10 10:55 a.m.41 views

CVE-2013-5525

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.

6.5CVSS8.2AI score0.0076EPSS
CVE
CVE
added 2014/05/26 12:25 a.m.40 views

CVE-2014-3276

Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packe...

4CVSS6.5AI score0.00585EPSS
CVE
CVE
added 2013/10/10 10:55 a.m.37 views

CVE-2013-5524

Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.

4.3CVSS5.9AI score0.00561EPSS
CVE
CVE
added 2014/01/29 6:34 p.m.34 views

CVE-2014-0681

Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine (ISE) 1.2 patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via a report containing a crafted URL that is not properly handled during generation of report-output pages, aka Bug ID CSCui15064.

4.3CVSS5.8AI score0.00707EPSS