Cisco Identity Services Engine Software vulnerabilities
54 known vulnerabilities in Cisco Identity Services Engine Software from Cisco. 54 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Cisco Identity Services Engine Software: Unrestricted Upload of File with Dangerous Type
Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilitie
- 8.8 High severity
Cisco Identity Services Engine Software: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, an attacker must have valid
- 7.2 High severity
Cisco Identity Services Engine Software: Unrestricted Upload of File with Dangerous Type
Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilitie
- 8.6 High severity
Cisco Identity Services Engine Software: Improper Handling of Exceptional Conditions
A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulnerability is due to improper handling of c
- 7.2 High severity
Cisco Identity Services Engine Software: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must ha
- 7.2 High severity
Cisco Identity Services Engine Software: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must ha
- 7.8 High severity
Cisco Identity Services Engine Software: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain roo
- 8.8 High severity
Cisco Identity Services Engine Software: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of user inpu
- 8.8 High severity
Cisco Identity Services Engine Software: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to make unauthorized changes to the file system of an affected device. This vulnerability is due to insufficient input val
- 8.8 High severity
Cisco Identity Services Engine Software: Cross-Site Request Forgery
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This vulner
- 8.8 High severity
Cisco Identity Services Engine Software: Incorrect Use of Privileged APIs
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files. This vulnerability is due to improper access control in the web-based m
- 8.1 High severity
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)…
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read and delete files on an affected device. This vulnerability is due to insufficient validation of user-supplied in
- 9.8 Critical severity
Cisco Identity Services Engine Software: Improper Authentication
A vulnerability in the login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to log in without credentials and access all roles without any restrictions. This vulnerability is due to exposed sensitive Security Asser
- 7.5 High severity
A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an…
A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulnerability is due to improper handling of certain RADIUS reque