Cisco Cisco Identity Services Engine Software

• CVE-2026-20136 Medium 6.0 Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability 0.5%
• CVE-2026-20180 Critical 9.9 Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability 6.0%
• CVE-2026-20186 Critical 9.9 Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability 5.6%
• CVE-2026-20148 Medium 4.9 Cisco Identity Services Engine Path Traversal Vulnerability 6.5%
• CVE-2026-20147 Critical 9.9 Cisco Identity Services Engine Remote Code Execution Vulnerability 10.4%
• CVE-2026-20132 Medium 4.8 Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities 0.2%
• CVE-2026-20047 Medium 4.8 Cisco Identity Services Engine Cross-Site Scripting Vulnerability 0.3%
• CVE-2026-20076 Medium 4.8 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability 0.3%
• CVE-2026-20029 Medium 4.9 Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability 6.1%
• CVE-2025-20304 Medium 5.4 Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the inte 0.2%
• CVE-2025-20305 Medium 4.3 A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability exists b 0.3%
• CVE-2025-20289 Medium 4.8 Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the inte 0.2%
• CVE-2025-20303 Medium 5.4 Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the inte 3.9%
• CVE-2025-20343 High 8.6 Cisco Identity Services Engine Radius Suppression Denial of Service Vulnerability 0.7%
• CVE-2025-20131 Medium 4.9 Cisco Identity Services Engine Arbitrary File Upload Vulnerability 0.3%
• CVE-2025-20332 Medium 4.3 Cisco Identity Services Engine Authorization Bypass Vulnerability 0.4%
• CVE-2025-20331 Medium 5.4 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy 0.2%
• CVE-2025-20285 Medium 4.1 Cisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability 0.5%
• CVE-2025-20284 Medium 6.5 Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability 25.1%
• CVE-2025-20283 Medium 6.5 Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability 13.2%
• CVE-2025-20282 Critical 10.0 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability 38.7%
• CVE-2025-20264 Medium 6.4 Cisco Identity Services Engine Authorization Bypass Vulnerability 0.4%
• CVE-2025-20286 Critical 9.9 ISE on AWS Static Credential 1.2%
• CVE-2025-20130 Medium 4.9 Cisco Identity Services Engine Access Control Bypass Vulnerability 0.6%
• CVE-2025-20267 Medium 4.8 Cisco Identity Services Stored Cross-Site Scripting Vulnerability 0.3%
• CVE-2025-20152 High 8.6 ISE restart 0.7%
• CVE-2025-20205 Medium 4.8 Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) 0.3%
• CVE-2025-20204 Medium 4.8 Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) 0.3%
• CVE-2025-20125 Critical 9.1 Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability 16.5%
• CVE-2025-20124 Critical 9.9 Cisco Identity Services Engine Java Deserialization Vulnerability 18.6%
• CVE-2020-3525 Medium 4.3 Cisco Identity Services Engine Password Disclosure to an Unauthorized Actor Vulnerability 0.6%
• CVE-2024-20539 Medium 4.8 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability 0.3%
• CVE-2024-20538 Medium 6.1 Cisco Identity Services Engine Cross-Site Scripting Vulnerability 0.3%
• CVE-2024-20537 Medium 6.5 Cisco Identity Services Engine Authorization Bypass Vulnerability 0.5%
• CVE-2024-20532 Medium 5.5 Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability 0.5%
• CVE-2024-20531 Medium 5.5 Cisco Identity Services Engine XML External Entity Injection Vulnerability 0.4%
• CVE-2024-20530 Medium 6.1 Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability 0.3%
• CVE-2024-20529 Medium 5.5 Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability 0.5%
• CVE-2024-20528 Low 3.8 Cisco Identity Services Engine Path Traversal Vulnerability 0.6%
• CVE-2024-20527 Medium 5.5 Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability 0.5%
• CVE-2024-20525 Medium 6.1 Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability 0.3%
• CVE-2024-20487 Medium 4.3 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy 0.3%
• CVE-2024-20476 Medium 4.3 Cisco Identity Services Engine Authorization Bypass Vulnerability 0.4%
• CVE-2024-20515 Medium 6.5 Cisco Identity Services Engine Information Disclosure Vulnerability 0.3%
• CVE-2024-20469 Medium 6.0 Cisco Identity Services Engine Command Injection Vulnerability 1.1%
• CVE-2024-20417 Medium 6.5 Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabities 0.5%
• CVE-2024-20466 Medium 6.5 Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability 0.5%
• CVE-2024-20486 Medium 6.5 Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability 0.3%
• CVE-2024-20479 Medium 4.8 A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due 0.3%
• CVE-2024-20443 Medium 5.4 A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due 0.3%