Vulnerabilities > Cisco > Identity Services Engine > 3.0.0.458

DATE CVE VULNERABILITY TITLE RISK
2021-10-21 CVE-2021-40123 Incorrect Default Permissions vulnerability in Cisco Identity Services Engine
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative read-only privileges to download files that should be restricted.
network
low complexity
cisco CWE-276
6.5
6.5
2021-10-06 CVE-2021-1594 OS Command Injection vulnerability in Cisco Identity Services Engine
A vulnerability in the REST API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a command injection attack and elevate privileges to root.
network
high complexity
cisco CWE-78
8.1
8.1
2021-10-06 CVE-2021-34706 XXE vulnerability in Cisco Identity Services Engine
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access sensitive information or conduct a server-side request forgery (SSRF) attack through an affected device.
network
low complexity
cisco CWE-611
5.4
5.4