Lucene search

K
CiscoIdentity Services Engine Software-

17 matches found

CVE
CVE
added 2013/04/29 9:55 p.m.50 views

CVE-2013-1196

The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management Solution (LMS), Prime Collaboration, Unified Provisioning Manager, Network Ser...

6.8CVSS6.3AI score0.00084EPSS
CVE
CVE
added 2014/12/22 7:59 p.m.46 views

CVE-2014-8017

The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to discover backup-encryption passwords via a crafted request that triggers inclusion of a password in a reply, aka Bug ID CSCur41673.

5CVSS6.9AI score0.00152EPSS
CVE
CVE
added 2013/10/25 3:52 a.m.45 views

CVE-2013-5521

Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers to cause a denial of service (exhaustion of the account supply) via a series of requests within one session, aka Bug ID CSCue94287.

5CVSS6.8AI score0.00474EPSS
CVE
CVE
added 2013/02/19 11:55 p.m.44 views

CVE-2013-1125

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and N...

6.8CVSS6.3AI score0.00084EPSS
CVE
CVE
added 2015/01/15 10:59 p.m.44 views

CVE-2014-8022

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow remote attackers to inject arbitrary web script or HTML via input to unspecified web pages, aka Bug IDs CSCur69835 and CSCur69776.

4.3CVSS5.9AI score0.00295EPSS
CVE
CVE
added 2013/08/29 12:7 p.m.41 views

CVE-2013-3471

The captive portal application in Cisco Identity Services Engine (ISE) allows remote attackers to discover cleartext usernames and passwords by leveraging unspecified use of hidden form fields in an HTML document, aka Bug ID CSCug02515.

4.3CVSS6.8AI score0.00394EPSS
CVE
CVE
added 2013/09/30 5:9 p.m.40 views

CVE-2013-5504

Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266.

4.3CVSS5.9AI score0.00561EPSS
CVE
CVE
added 2013/10/16 10:52 a.m.40 views

CVE-2013-5539

The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload files with an arbitrary file type, and consequently conduct attacks against unspecified other systems, via a crafted file, aka Bug ID CSCui67511.

6CVSS6.6AI score0.00366EPSS
CVE
CVE
added 2013/08/30 1:55 a.m.38 views

CVE-2012-5744

Multiple cross-site scripting (XSS) vulnerabilities in the guest portal in Cisco Identity Services Engine (ISE) Software allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCud11139 and CSCug02904.

4.3CVSS5.9AI score0.00263EPSS
CVE
CVE
added 2013/07/18 12:51 p.m.38 views

CVE-2013-3420

Cross-site request forgery (CSRF) vulnerability in the web framework on the Cisco Identity Services Engine (ISE) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506.

6.8CVSS7.4AI score0.00122EPSS
CVE
CVE
added 2013/07/04 2:33 p.m.36 views

CVE-2013-3413

Cross-site scripting (XSS) vulnerability in the search form in the administration/monitoring panel on the Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuh87036.

4.3CVSS5.9AI score0.00225EPSS
CVE
CVE
added 2014/12/22 7:59 p.m.36 views

CVE-2014-8015

The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbitrary sponsor's guest account via a modified HTTP request, aka Bug ID CSCur64400.

4CVSS6.4AI score0.00171EPSS
CVE
CVE
added 2013/10/16 10:52 a.m.35 views

CVE-2013-5541

Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename, aka Bug ID CSCui67495.

3.5CVSS5.3AI score0.00185EPSS
CVE
CVE
added 2014/01/15 4:11 p.m.35 views

CVE-2014-0665

The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, ak...

4CVSS5.8AI score0.00381EPSS
CVE
CVE
added 2013/09/30 5:9 p.m.34 views

CVE-2013-5505

Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30275.

4.3CVSS5.9AI score0.00516EPSS
CVE
CVE
added 2013/10/16 10:52 a.m.34 views

CVE-2013-5538

The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506.

5CVSS6.9AI score0.0019EPSS
CVE
CVE
added 2013/10/16 10:52 a.m.33 views

CVE-2013-5540

The file-upload feature in Cisco Identity Services Engine (ISE) allows remote authenticated users to cause a denial of service (disk consumption and administration-interface outage) by uploading many files, aka Bug ID CSCui67519.

6.8CVSS6.4AI score0.00363EPSS