Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Cisco Identity Services Engine Software — 20230517 Cisco Identity Services Engine XML External Entity Injection Vulnerabilities Clear all filters
TI-2023-06880 CVE-2023-20174 · GHSA-5829-98wj-8j37

Cisco Identity Services Engine XML External Entity Injection Vulnerabilities

Priority LOW 24

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery (SSRF)…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0072 Published 2023-05-18 No fix listed CWE-611
TI-2023-06879 CVE-2023-20173 · GHSA-xmff-c8v2-fhfp

Cisco Identity Services Engine XML External Entity Injection Vulnerabilities

Priority LOW 24

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery (SSRF)…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00766 Published 2023-05-18 No fix listed CWE-611