Cisco Cisco Identity Services Engine Software

• CVE-2024-20296 Medium 4.7 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit 0.5%
• CVE-2024-20368 Medium 6.5 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and 0.3%
• CVE-2024-20332 Medium 5.5 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a server-side request forgery (SSRF) attack throu 0.4%
• CVE-2024-20251 Medium 4.8 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack agains 0.4%
• CVE-2023-20272 Medium 6.7 A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of the application. This 0.9%
• CVE-2023-20208 Medium 4.8 A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the web-based management interface of an aff 0.5%
• CVE-2023-20175 High 8.8 A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. 0.5%
• CVE-2023-20170 Medium 6.0 A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. 0.5%
• CVE-2023-20196 Medium 4.7 Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administra 0.8%
• CVE-2023-20195 Medium 4.7 Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administra 0.8%
• CVE-2023-20213 Medium 4.3 A vulnerability in the CDP processing feature of Cisco ISE could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of the CDP process on an affected device. This 0.3%
• CVE-2023-20194 Medium 4.9 A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device. To exploit this vulnerabilit 0.7%
• CVE-2023-20193 Medium 6.0 A vulnerability in the Embedded Service Router (ESR) of Cisco ISE could allow an authenticated, local attacker to read, write, or delete arbitrary files on the underlying operating system and escalate 0.2%
• CVE-2023-20243 High 8.6 A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS 0.9%
• CVE-2023-20111 Medium 6.5 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access sensitive information. This vulnerability is du 0.7%
• CVE-2023-20228 Medium 6.1 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack aga 0.5%
• CVE-2023-20174 Medium 4.9 Cisco Identity Services Engine XML External Entity Injection Vulnerabilities 0.7%
• CVE-2023-20087 Medium 4.9 Cisco Identity Services Engine Arbitrary File Download Vulnerabilities 0.8%
• CVE-2023-20164 Medium 6.5 Cisco Identity Services Engine Command Injection Vulnerabilities 1.1%
• CVE-2023-20163 Medium 6.5 Cisco Identity Services Engine Command Injection Vulnerabilities 1.1%
• CVE-2023-20172 Medium 5.4 Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities 0.4%
• CVE-2023-20106 Medium 5.4 Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities 0.4%
• CVE-2023-20173 Medium 4.9 Cisco Identity Services Engine XML External Entity Injection Vulnerabilities 0.8%
• CVE-2023-20166 Medium 6.0 Cisco Identity Services Engine Path Traversal Vulnerabilities 0.2%
• CVE-2023-20167 Medium 6.0 Cisco Identity Services Engine Path Traversal Vulnerabilities 0.5%
• CVE-2023-20077 Medium 4.9 Cisco Identity Services Engine Arbitrary File Download Vulnerabilities 0.8%
• CVE-2023-20171 Medium 5.4 Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities 0.4%
• CVE-2023-20030 Medium 6.0 Cisco Identity Services Engine XML External Entity Injection Vulnerability 0.8%
• CVE-2023-20023 Medium 6.0 Cisco Identity Services Engine Privilege Escalation Vulnerabilities 0.4%
• CVE-2023-20122 Medium 6.0 Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities 0.2%
• CVE-2023-20152 Medium 6.0 Cisco Identity Services Engine Command Injection Vulnerabilities 0.4%
• CVE-2023-20153 Medium 6.0 Cisco Identity Services Engine Command Injection Vulnerabilities 0.4%
• CVE-2023-20121 Medium 6.0 Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities 0.2%
• CVE-2023-20022 Medium 6.0 Cisco Identity Services Engine Privilege Escalation Vulnerabilities 0.4%
• CVE-2023-20021 Medium 6.0 Cisco Identity Services Engine Privilege Escalation Vulnerabilities 0.4%
• CVE-2023-20085 Medium 6.1 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a u 0.7%
• CVE-2022-20967 Medium 4.8 A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attacks against other users of the 0.5%
• CVE-2022-20964 Medium 6.3 A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system. 30.6%
• CVE-2022-20966 Medium 5.4 A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attacks against other users of the 27.6%
• CVE-2022-20965 Medium 4.3 A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to take privileges actions within the web-based management interfa 0.6%
• CVE-2022-20962 Low 3.8 A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to make unauthorized changes to the file system of an affected 1.1%
• CVE-2022-20963 Medium 5.4 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a use 0.5%
• CVE-2022-20937 Medium 5.3 A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to negatively affect the performance of an a 1.0%
• CVE-2022-20956 High 7.1 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files. This vul 1.5%
• CVE-2022-20961 High 8.8 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and 0.5%
• CVE-2022-20959 Medium 6.1 Cisco Identity Services Engine Cross-Site Scripting Vulnerability 0.9%
• CVE-2022-20822 High 7.1 Cisco Identity Services Engine Unauthorized File Access Vulnerability 1.4%
• CVE-2022-20914 Medium 4.9 Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability 1.0%
• CVE-2022-20819 Medium 6.5 Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability 1.0%
• CVE-2022-20733 Medium 5.3 Cisco Identity Services Engine Authentication Bypass Vulnerability 1.1%