Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Cisco Identity Services Engine Software — 20230517 Cisco Identity Services Engine Arbitrary File Download Vulnerabilities Clear all filters
TI-2023-06795 CVE-2023-20087 · GHSA-xmhf-4p4x-fx7c

Cisco Identity Services Engine Arbitrary File Download Vulnerabilities

Priority LOW 30

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00839 Published 2023-05-18 No fix listed CWE-37
TI-2023-06785 CVE-2023-20077 · GHSA-mhf4-w9w2-rg8w

Cisco Identity Services Engine Arbitrary File Download Vulnerabilities

Priority LOW 30

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00839 Published 2023-05-18 No fix listed CWE-37