Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CiscoIdentity Services Engine3.2.0

7 matches found

CVE
CVE•added 2025/02/05 5:15 p.m.•227 views

CVE-2025-20124

A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device. This vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit thi...

9.9CVSS9.7AI score0.00227EPSS
CVE
CVE•added 2025/02/05 5:15 p.m.•137 views

CVE-2025-20125

A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node. This vulnerability is due to a lack of authorization in a specific API and improper validation of ...

9.1CVSS6.7AI score0.00099EPSS
CVE
CVE•added 2025/02/05 5:15 p.m.•54 views

CVE-2025-20204

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by t...

4.8CVSS5AI score0.00044EPSS
CVE
CVE•added 2025/02/05 5:15 p.m.•50 views

CVE-2025-20205

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by t...

4.8CVSS6AI score0.00044EPSS
CVE
CVE•added 2025/06/04 5:15 p.m.•43 views

CVE-2025-20130

A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of the file copy...

7.2CVSS7.1AI score0.00047EPSS
CVE
CVE•added 2025/05/21 5:15 p.m.•35 views

CVE-2025-20267

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by t...

4.8CVSS4.9AI score0.00039EPSS
CVE
CVE•added 2025/06/25 4:15 p.m.•7 views

CVE-2025-20264

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass the authorization mechanisms for specific administrative functions. This vulnerability is due to insufficient authorization enforcement mechanisms fo...

6.4CVSS7.2AI score0.00065EPSS