Identity Services Engine@- Security Vulnerabilities and Issues — Identity Services Engine@- CVE List

Lucene search

CiscoIdentity Services Engine-

8 matches found

CVE•added 2020/11/06 7:15 p.m.•62 views

CVE-2020-26083

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based ...

4.8CVSS4.9AI score0.00174EPSS

CVE•added 2014/01/29 6:34 p.m.•41 views

CVE-2014-0680

Cross-site scripting (XSS) vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCui15038.

4.3CVSS5.8AI score0.00532EPSS

CVE•added 2013/10/16 10:52 a.m.•40 views

CVE-2013-5539

The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload files with an arbitrary file type, and consequently conduct attacks against unspecified other systems, via a crafted file, aka Bug ID CSCui67511.

6CVSS6.6AI score0.00366EPSS

CVE•added 2013/07/18 12:51 p.m.•38 views

CVE-2013-3420

Cross-site request forgery (CSRF) vulnerability in the web framework on the Cisco Identity Services Engine (ISE) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506.

6.8CVSS7.4AI score0.00122EPSS

CVE•added 2013/07/29 1:59 p.m.•35 views

CVE-2013-3445

The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service (CPU consumption or process crash) via a flood of malformed IP packets, aka Bug ID CSCug94572.

5CVSS6.9AI score0.01558EPSS

CVE•added 2013/10/16 10:52 a.m.•35 views

CVE-2013-5541

Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename, aka Bug ID CSCui67495.

3.5CVSS5.3AI score0.00185EPSS

CVE•added 2013/10/16 10:52 a.m.•34 views

CVE-2013-5538

The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506.

5CVSS6.9AI score0.0019EPSS

CVE•added 2013/10/16 10:52 a.m.•33 views

CVE-2013-5540

The file-upload feature in Cisco Identity Services Engine (ISE) allows remote authenticated users to cause a denial of service (disk consumption and administration-interface outage) by uploading many files, aka Bug ID CSCui67519.

6.8CVSS6.4AI score0.00363EPSS