CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

CVE-2022-20964

Cisco Identity Services Engine (ISE) web-based management interface vulnerability CVE-2022-20964 allows an authenticated, remote attacker to inject arbitrary OS commands due to improper input validation. Exploitation would run commands with the web services user’s privileges. The primary CVE reco...

CVE-2022-20965

CVE-2022-20965 concerns Cisco Identity Services Engine (ISE). The issue is improper access control in the web-based management interface, allowing an authenticated, remote attacker to perform privileged actions by sending direct requests that bypass internal checks. Affected product is Cisco ISE;...

CVE-2022-20967

CVE-2022-20967 affects Cisco Identity Services Engine (ISE) web-based management interface. The issue is stored cross-site scripting caused by improper validation of input before storage, enabling an authenticated, remote attacker to inject malicious HTML/script that can be used in subsequent XSS...

CVE-2022-20966

Cisco Identity Services Engine (ISE) web-based management interface is affected by a stored XSS flaw due to improper input validation before storage. An authenticated, remote attacker could inject malicious HTML/script via entries created in the interface, enabling XSS against other users. Affect...

CVE-2025-20124

Cisco Identity Services Engine (ISE) exposes a vulnerability via insecure Java deserialization in its API. An authenticated attacker with valid read-only credentials can send a crafted serialized Java object to the affected API to execute arbitrary commands on the device with root privileges, pot...

CVE-2025-20125

Cisco ISE (Identity Services Engine) vulnerability CVE-2025-20125 affects the API layer and is tied to multiple issues including insecure Java deserialization and inadequate authorization. An attacker with valid read-only credentials can remotely access the device to obtain sensitive information,...

CVE-2026-20147

Cisco CVE-2026-20147 affects Cisco Identity Services Engine (ISE) and ISE-PIC. An authenticated, remote attacker with valid administrative credentials can exploit insufficient input validation via a crafted HTTP request to execute arbitrary commands on the device’s underlying OS, potentially gain...

CVE-2019-12644

The CVE-2019-12644 entry concerns Cisco Identity Services Engine (ISE) with a web-based management interface XSS vulnerability. The issue arises from the interface’s failure to properly validate user-supplied input, enabling an unauthenticated, remote attacker to lure a user into clicking a craft...

CVE-2026-20181

Cisco ISE/ISE-PIC in Cisco IOS XE is affected by CVE-2026-20181. The CVE entry describes authenticated remote command execution via crafted HTTP input with privilege escalation to root and potential DoS in single-node deployments. Connected PT-security material (PT-2026-34270) references a separa...

CVE-2026-20146

Cisco Identity Services Engine (ISE) and ISE-PIC are affected by CVE-2026-20146. The issue stems from improper validation of user-supplied input, enabling a remote, authenticated attacker (with valid administrative credentials) to perform path traversal via a crafted HTTP request and read or dele...

CVE-2026-20180

Cisco Identity Services Engine (ISE) contains a remote code execution vulnerability (CVE-2026-20180) that can be exploited by an authenticated attacker with at least Read Only Admin credentials. The issue stems from insufficient validation of user-supplied input, allowing a crafted HTTP request t...

CVE-2023-20167

Cisco Identity Services Engine (ISE) contains path traversal vulnerabilities that could let an authenticated Administrator read arbitrary files on the underlying OS or escalate to root. The issue affects ISE’s web management interface and is caused by improper validation of user-supplied input, r...

CVE-2023-20030

Cisco Identity Services Engine (ISE) exposes a XXE-based vulnerability in its web-based management interface. The issue arises from improper handling of XML External Entity entries when parsing certain XML files, enabling an authenticated, remote attacker (requiring Super Admin or Policy Admin cr...

CVE-2021-1306

CVE-2021-1306 is a local file inclusion vulnerability in the restricted shell of Cisco EPN Manager, Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure. An authenticated shell user can exploit improper validation of CLI parameters to identify directories and write arbitrary files...

CVE-2020-27122

CVE-2020-27122 concerns Cisco Identity Services Engine (ISE) privilege escalation via the Microsoft Active Directory integration. Affected functionality allows an authenticated local attacker with a valid administrator account to exploit incorrect privilege assignment to obtain root privileges on...

CVE-2022-20937

The CVE-2022-20937 issue affects Cisco Identity Services Engine (ISE) Software and describes a resource-management DoS vulnerability: unauthenticated, remote actors can reduce device performance by sending specific RADIUS traffic, causing delays in RADIUS authentications. Public details in connec...

CVE-2026-20132

Cisco Identity Services Engine (ISE) web-based management interface contains multiple XSS weaknesses due to insufficient input sanitization. Exploitation requires an authenticated user with administrative write privileges; an attacker could trigger stored or reflected XSS by convincing a user to ...

CVE-2022-20961

CVE-2022-20961 refers to a CSRF vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE). The issue arises from insufficient CSRF protections, allowing an unauthenticated, remote attacker to trick a logged-in user into performing arbitrary actions on the affecte...

CVE-2026-20136

CVE-2026-20136 affects Cisco Identity Services Engine (ISE) and ISE-PIC CLI. Root cause: insufficient input validation enabling crafted CLI input to trigger command injection and elevate privileges to root on the underlying OS. Impact: authenticated, local admin can gain root privileges. Exploita...

CVE-2026-20186

The CVE-2026-20186 entry concerns Cisco Identity Services Engine (ISE). The vulnerability arises from insufficient validation of user-supplied input, enabling an authenticated (Read Only Admin) attacker to remotely execute arbitrary commands on the device via a crafted HTTP request. An attacker c...

CVE-2022-20819

Cisco Identity Services Engine (ISE) exposes an information-disclosure vulnerability in its web-based management interface. The issue arises from inadequate enforcement of administrative privilege levels for sensitive data, enabling an authenticated attacker with read-only access to a management ...

CVE-2020-3149

Cisco Identity Services Engine (ISE) Stored Cross-Site Scripting is caused by insufficient input validation in the web-based management interface. The CVE-2020-3149 vulnerability affects ISE and can be exploited by an authenticated, remote attacker via a crafted input field to execute arbitrary s...

CVE-2021-1412

CVE-2021-1412 affects Cisco Identity Services Engine (ISE) Admin portal. The root cause is improper enforcement of administrator privilege levels for sensitive data, enabling an authenticated, read-only admin to browse pages containing sensitive configuration information and disclose it. Exploita...

CVE-2025-20267

Cisco Identity Services Engine (ISE) web interface contains a stored XSS vulnerability in its web-based management pages due to insufficient input validation. An attacker with valid administrative credentials can inject malicious script, potentially executing in the context of the user’s browser ...

CVE-2019-1941

Cisco ISE Cross‑Site Scripting (CVE-2019-1941) affects the web‑based management interface of Cisco Identity Services Engine (ISE). The issue arises from improper validation of user‑supplied input, allowing an unauthenticated, remote attacker to lure a user into clicking a malicious link and execu...

CVE-2022-20963

Cisco Identity Services Engine (ISE).web-based management interface is affected by a cross-site scripting (XSS) vulnerability due to insufficient input validation. An authenticated, remote attacker with valid credentials could inject malicious script into interface pages to execute code in the us...

CVE-2011-3290

Cisco Identity Services Engine (ISE) prior to 1.0.4.MR2 is affected by CVE-2011-3290 due to default Oracle database credentials. The underlying cause is hard-coded/default credentials in the ISE database, enabling a remote attacker to modify configuration and perform administrative actions withou...

CVE-2021-34759

CVE-2021-34759 affects Cisco Identity Services Engine (ISE). The flaw is in the web-based management interface’s input validation, enabling an authenticated attacker with administrative credentials to perform a cross-site scripting (XSS) attack against users of the ISE interface. Exploitation cou...

CVE-2018-0275

Cisco Identity Services Engine (ISE) contains a local, authenticated-exploit vulnerability in the support tunnel feature. Improper configuration can let an attacker unlock the support user account and access the tunnel password and device serial number, enabling execution of arbitrary commands wi...

CVE-2025-20130

Cisco ISE/ISE-PIC expose an authenticated admin-facing Arbitrary File Upload vulnerability via the API due to improper validation of the file copy function. An admin with network access can send crafted file upload requests to a specific endpoint to upload arbitrary files. Cisco has released upda...

CVE-2021-1606

CVE-2021-1606 affects Cisco Identity Services Engine (ISE) via stored XSS in the web-based management interface caused by insufficient input validation. An authenticated attacker with valid admin credentials could inject malicious script into certain pages, allowing execution of arbitrary code in...

CVE-2021-1603

CVE-2021-1603 affects Cisco Identity Services Engine (ISE) web-based management interface. The issue is stored cross-site scripting (XSS) vulnerabilities caused by insufficient validation of user-supplied input, exploitable by an authenticated attacker who has administrative credentials to inject...

CVE-2020-3340

CVE-2020-3340 refers to multiple stored XSS vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE). The flaws arise from insufficient validation of user-supplied input on interface pages, allowing an authenticated, remote attacker with administrative credent...

CVE-2021-1605

CVE-2021-1605 relates to Cisco Identity Services Engine (ISE) Web management interface. The issue is a set of stored cross-site scripting (XSS) vulnerabilities caused by insufficient validation of user-supplied input, enabling an authenticated, remote attacker with valid administrative credential...

CVE-2021-34738

The CVE-2021-34738 entry relates to multiple cross-site scripting (XSS) vulnerabilities in the Cisco Identity Services Engine (ISE) web-based management interface. The underlying issue is input validation in the web UI that could allow an attacker to inject and execute script code within the inte...

CVE-2021-1604

Cisco Identity Services Engine (ISE) is affected by multiple stored cross-site scripting (XSS) vulnerabilities in its web-based management interface due to insufficient validation of user-supplied input. An authenticated attacker with administrative credentials could inject malicious code into sp...

CVE-2018-0091

Cisco ISE DOM-based XSS (CVE-2018-0091) affects the web-based management interface of Cisco Identity Services Engine. The vulnerability arises from insufficient validation of user-supplied input, allowing an unauthenticated, remote attacker to entice a user to click a malicious link and run arbit...

CVE-2021-1416

Cisco Identity Services Engine (ISE) Admin portal vulnerabilities allow an authenticated, read-only administrator to access pages containing sensitive configuration data due to improper enforcement of administrator privilege levels. A remote attacker with read-only admin access could browse these...

CVE-2023-20173

Cisco Identity Services Engine (ISE) is affected by CVE-2023-20173, an XML External Entity Injection vulnerability in the web-based management interface that can allow an authenticated, remote attacker with valid Administrator credentials to read arbitrary files or perform SSRF. The exploitation ...

CVE-2021-1607

CVE-2021-1607 affects Cisco Identity Services Engine (ISE). The stored cross-site scripting vulnerabilities arise in the web-based management interface, caused by insufficient validation of user-supplied input. An authenticated attacker with administrative credentials could inject malicious code ...

CVE-2024-20476

CVE-2024-20476 affects Cisco Identity Services Engine (ISE) in its web-based management interface. The issue stems from lack of server-side validation of Administrator permissions, allowing an authenticated, remote attacker to bypass file-management authorization. An attacker could exploit this b...

CVE-2023-20174

Cisco ISE CVE-2023-20174 refers to multiple vulnerabilities in the web-based management interface, stemming from XML External Entity Injection. When authenticated as an administrator, an attacker could read arbitrary files or perform SSRF via the affected device. The root cause is XML handling in...

CVE-2026-20047

Cisco ISE and ISE-PIC web management interfaces are affected by a cross-site scripting (XSS) vulnerability (CVE-2026-20047) due to insufficient validation of user-supplied input. An authenticated attacker with valid administrative credentials could inject malicious code into specific pages, allow...

CVE-2025-20284

Cisco ISE and Cisco ISE-PIC have a CVE-2025-20284 vulnerability in a specific API that could allow an authenticated, remote attacker with high privileges to execute arbitrary code as root on the underlying OS. Root cause is insufficient validation of user-supplied input, exploitable by submitting...

CVE-2025-20285

CVE-2025-20285 describes a vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC that could allow an authenticated, remote attacker to bypass IP-based access controls and log into the device from an IP address that should have been restricted. The root cause is imprope...

CVE-2025-20283

The vulnerability (CVE-2025-20283) affects Cisco Identity Services Engine (ISE) and ISE-PIC via a specific API, caused by insufficient validation of user-supplied input. An attacker with valid high-priv credentials could submit crafted API requests to execute commands as root on the underlying OS...

CVE-2026-20148

Cisco Identity Services Engine (ISE) and ISE-PIC are affected by a path traversal vulnerability due to improper input validation. An authenticated attacker with administrative credentials can issue a crafted HTTP request to read arbitrary files on the underlying OS. Exploitation details indicate ...