Cisco

Identity Services Engine

181 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2026-76449

  • EPSS 0.33%
  • Veröffentlicht 16.09.2026 20:18:15
  • Zuletzt bearbeitet 28.09.2026 13:04:03

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to ...

4.9

CVE-2026-76450

  • EPSS 0.25%
  • Veröffentlicht 16.09.2026 20:18:06
  • Zuletzt bearbeitet 28.09.2026 13:03:56

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to ...

4.9

CVE-2026-76428

Medienbericht
  • EPSS 0.37%
  • Veröffentlicht 16.09.2026 20:17:56
  • Zuletzt bearbeitet 28.09.2026 13:11:48

A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the session database. This vulnerability is due to certain parameters being concatenated directl...

5.3

CVE-2026-76433

  • EPSS 0.93%
  • Veröffentlicht 16.09.2026 20:17:48
  • Zuletzt bearbeitet 28.09.2026 13:16:49

A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affected device. This vulnerability is due to insufficient validation of dir...

5.3

CVE-2026-76439

  • EPSS 0.32%
  • Veröffentlicht 16.09.2026 20:17:47
  • Zuletzt bearbeitet 28.09.2026 13:12:38

A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This...

7.6

CVE-2026-76425

Medienbericht
  • EPSS 0.3%
  • Veröffentlicht 16.09.2026 20:14:20
  • Zuletzt bearbeitet 28.09.2026 12:27:36

A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database. This vulnerability is due to insufficient validation of certain parameters that are concatenated ...

7.2

CVE-2026-76424

Medienbericht
  • EPSS 0.62%
  • Veröffentlicht 16.09.2026 20:13:59
  • Zuletzt bearbeitet 28.09.2026 12:27:09

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit ...

10

CVE-2026-76460

Warnung Medienbericht
  • EPSS 0.78%
  • Veröffentlicht 16.09.2026 20:12:02
  • Zuletzt bearbeitet 07.10.2026 19:17:40

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could expl...

10

CVE-2026-20130

Medienbericht
  • EPSS 0.4%
  • Veröffentlicht 16.09.2026 20:08:09
  • Zuletzt bearbeitet 28.09.2026 13:02:21

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. T...

10

CVE-2026-20192

Medienbericht
  • EPSS 0.43%
  • Veröffentlicht 16.09.2026 20:07:00
  • Zuletzt bearbeitet 28.09.2026 13:02:06

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. Th...