Identity Services Engine

DATE	CVE	VULNERABILITY TITLE	RISK
2021-07-08	CVE-2021-1607	Cross-site Scripting vulnerability in Cisco Identity Services Engine Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user. network low complexity cisco CWE-79	4.8
2021-05-22	CVE-2021-1306	Externally Controlled Reference to a Resource in Another Sphere vulnerability in Cisco Identity Services Engine A vulnerability in the restricted shell of Cisco Evolved Programmable Network (EPN) Manager, Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to identify directories and write arbitrary files to the file system. local low complexity cisco CWE-610	3.4
2021-02-17	CVE-2021-1416	Unspecified vulnerability in Cisco Identity Services Engine Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. network low complexity cisco	4.3
2021-02-17	CVE-2021-1412	Unspecified vulnerability in Cisco Identity Services Engine Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. network low complexity cisco	6.5
2020-11-06	CVE-2020-3551	Cross-site Scripting vulnerability in Cisco Identity Services Engine 2.6/2.7 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. network low complexity cisco CWE-79	6.1
2020-11-06	CVE-2020-27122	Improper Privilege Management vulnerability in Cisco Identity Services Engine A vulnerability in the Microsoft Active Directory integration of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to elevate privileges on an affected device. local low complexity cisco CWE-269	6.7
2020-11-06	CVE-2020-26083	Cross-site Scripting vulnerability in Cisco Identity Services Engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. network low complexity cisco CWE-79	4.8
2020-10-08	CVE-2020-3589	Cross-site Scripting vulnerability in Cisco Identity Services Engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. network low complexity cisco CWE-79	4.8
2020-10-08	CVE-2020-3467	Incorrect Authorization vulnerability in Cisco Identity Services Engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. network low complexity cisco CWE-863	7.7
2020-09-23	CVE-2019-1736	Improper Verification of Cryptographic Signature vulnerability in Cisco products A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker to bypass Unified Extensible Firmware Interface (UEFI) Secure Boot validation checks and load a compromised software image on an affected device. low complexity cisco CWE-347	6.6