identity_services_engine_software vulnerabilities

2 known vulnerabilities in identity_services_engine_software from Cisco. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Cisco Identity Services Engine Software: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-20417Aug 21, 2024Cisco

  Multiple vulnerabilities in the REST API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct blind SQL injection attacks. These vulnerabilities are due to insufficient validation of user-supplied input in REST API c

• 7.2 High severity

  Cisco Identity Services Engine Software: Unrestricted Upload of File with Dangerous Type

  CVE-2024-20296Jul 17, 2024Cisco

  A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Po