Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Cisco Identity Services Engine Software 2.6.0 Clear all filters
TI-2019-01561 CVE-2019-1941 · GHSA-9h55-wh2g-9x6v

Cisco Identity Services Engine Cross-Site Scripting Vulnerability

Priority LOW 30

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01271 Published 2019-07-17 Fixed in 2.6.0 CWE-79
TI-2019-01562 CVE-2019-1942 · GHSA-wx9c-357r-4xg8

Cisco Identity Services Engine Blind SQL Injection Vulnerability

Priority LOW 31

A vulnerability in the sponsor portal web interface for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01204 Published 2019-07-17 Fixed in 2.6.0 CWE-89