Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Cisco Identity Services Engine Software n/a Clear all filters
TI-2019-11393 CVE-2019-15282 · GHSA-gh78-6hq3-f87p

Cisco Identity Services Engine Information Disclosure Vulnerability

Priority LOW 27

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker read tcpdump files generated on an affected device.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01221 Published 2019-10-16 No fix listed CWE-306
TI-2019-11392 CVE-2019-15281 · GHSA-m64x-w3xr-25qx

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability

Priority LOW 23

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00622 Published 2019-10-16 No fix listed CWE-79
TI-2019-09438 CVE-2019-12638 · GHSA-m87w-hjgg-m85m

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability

Priority LOW 25

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web-based ma…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00633 Published 2019-10-16 No fix listed CWE-79
TI-2019-09437 CVE-2019-12637 · GHSA-h25g-7c2c-487r

Cisco Identity Services Engine Multiple Stored Cross-Site Scripting Vulnerabilities

Priority LOW 25

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00633 Published 2019-10-16 No fix listed CWE-79