Cisco

Identity Services Engine Software

132 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2026-76428

Medienbericht
  • EPSS 0.37%
  • Veröffentlicht 16.09.2026 20:17:56
  • Zuletzt bearbeitet 28.09.2026 13:11:48

A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the session database. This vulnerability is due to certain parameters being concatenated directl...

5.3

CVE-2026-76433

  • EPSS 0.93%
  • Veröffentlicht 16.09.2026 20:17:48
  • Zuletzt bearbeitet 28.09.2026 13:16:49

A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affected device. This vulnerability is due to insufficient validation of dir...

5.3

CVE-2026-76439

  • EPSS 0.32%
  • Veröffentlicht 16.09.2026 20:17:47
  • Zuletzt bearbeitet 28.09.2026 13:12:38

A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This...

4.9

CVE-2026-20282

Medienbericht
  • EPSS 0.56%
  • Veröffentlicht 16.09.2026 20:15:43
  • Zuletzt bearbeitet 22.09.2026 21:17:30

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker co...

6.5

CVE-2026-20283

Medienbericht
  • EPSS 0.43%
  • Veröffentlicht 16.09.2026 20:15:27
  • Zuletzt bearbeitet 18.09.2026 13:28:28

A vulnerability in the IPsec Open API endpoint of Cisco ISE could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system.  This vulnerability is due to insufficient validation of user-supplied ...

7.6

CVE-2026-76425

Medienbericht
  • EPSS 0.3%
  • Veröffentlicht 16.09.2026 20:14:20
  • Zuletzt bearbeitet 28.09.2026 12:27:36

A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database. This vulnerability is due to insufficient validation of certain parameters that are concatenated ...

9.1

CVE-2026-20284

Medienbericht
  • EPSS 0.39%
  • Veröffentlicht 16.09.2026 20:14:08
  • Zuletzt bearbeitet 18.09.2026 13:28:28

A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient validation of user-supplied input in REST API calls. An attacker could explo...

7.2

CVE-2026-76424

Medienbericht
  • EPSS 0.62%
  • Veröffentlicht 16.09.2026 20:13:59
  • Zuletzt bearbeitet 28.09.2026 12:27:09

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit ...

7.5

CVE-2026-20247

  • EPSS 0.32%
  • Veröffentlicht 16.09.2026 20:12:10
  • Zuletzt bearbeitet 18.09.2026 13:28:28

A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerabil...

10

CVE-2026-76460

Warnung Medienbericht
  • EPSS 0.78%
  • Veröffentlicht 16.09.2026 20:12:02
  • Zuletzt bearbeitet 07.10.2026 19:17:40

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could expl...