[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFmTbqkdowk7dIwGQap4RcSB4QPYLQAMlGBdz9hKciO8":3,"g5a-ex:cisco\u002Fidentity_services_engine_software@*":245,"g5a-family:cisco\u002Fidentity_services_engine_software":247},{"success":4,"data":5},true,{"product":6,"versions":114,"topVulnerabilitiesByEpss":161,"kevVulnerabilities":222,"seoMetadata":223,"meta":242},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":113},"cisco","identity_services_engine_software",46,49,0,"2019-10-16",[14,18,21,24,27,29,31,33,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0",9,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"1.0.4",1,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"1.0.4.573",3,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"1.0_base",2,{"version":28,"cve_count":26,"kev_count":11,"has_kev":17},"1.0mr",{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},"1.0_mr_base",{"version":32,"cve_count":16,"kev_count":11,"has_kev":17},"1.1",{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},"1.1.1",4,{"version":37,"cve_count":23,"kev_count":11,"has_kev":17},"1.1.2",{"version":39,"cve_count":23,"kev_count":11,"has_kev":17},"1.1.3",{"version":41,"cve_count":23,"kev_count":11,"has_kev":17},"1.1.4",{"version":43,"cve_count":20,"kev_count":11,"has_kev":17},"1.1\\(4.1\\)",{"version":45,"cve_count":26,"kev_count":11,"has_kev":17},"1.1_base",{"version":47,"cve_count":26,"kev_count":11,"has_kev":17},"1.2",{"version":49,"cve_count":23,"kev_count":11,"has_kev":17},"1.2\\(0.747\\)",{"version":51,"cve_count":23,"kev_count":11,"has_kev":17},"1.2\\(0.793\\)",{"version":53,"cve_count":23,"kev_count":11,"has_kev":17},"1.2.0.899",{"version":55,"cve_count":26,"kev_count":11,"has_kev":17},"1.2\\(0.899\\)",{"version":57,"cve_count":26,"kev_count":11,"has_kev":17},"1.2.1",{"version":59,"cve_count":23,"kev_count":11,"has_kev":17},"1.2\\(1.198\\)",{"version":61,"cve_count":35,"kev_count":11,"has_kev":17},"1.2\\(1.901\\)",{"version":63,"cve_count":26,"kev_count":11,"has_kev":17},"1.2_base",{"version":65,"cve_count":20,"kev_count":11,"has_kev":17},"1.3",{"version":67,"cve_count":23,"kev_count":11,"has_kev":17},"1.3\\(0.722\\)",{"version":69,"cve_count":70,"kev_count":11,"has_kev":17},"1.3\\(0.876\\)",5,{"version":72,"cve_count":23,"kev_count":11,"has_kev":17},"1.3\\(106.146\\)",{"version":74,"cve_count":23,"kev_count":11,"has_kev":17},"1.3\\(120.135\\)",{"version":76,"cve_count":20,"kev_count":11,"has_kev":17},"1.4",{"version":78,"cve_count":26,"kev_count":11,"has_kev":17},"1.4\\(0.109\\)",{"version":80,"cve_count":23,"kev_count":11,"has_kev":17},"1.4\\(0.181\\)",{"version":82,"cve_count":26,"kev_count":11,"has_kev":17},"1.4\\(0.253\\)",{"version":84,"cve_count":20,"kev_count":11,"has_kev":17},"1.4\\(0.876\\)",{"version":86,"cve_count":20,"kev_count":11,"has_kev":17},"1.4\\(0.908\\)",{"version":88,"cve_count":20,"kev_count":11,"has_kev":17},"2.0\\(0.147\\)",{"version":90,"cve_count":20,"kev_count":11,"has_kev":17},"2.0\\(0.169\\)",{"version":92,"cve_count":20,"kev_count":11,"has_kev":17},"2.0\\(0.901\\)",{"version":94,"cve_count":20,"kev_count":11,"has_kev":17},"2.0\\(1.130\\)",{"version":96,"cve_count":20,"kev_count":11,"has_kev":17},"2.1\\(0.188\\)",{"version":98,"cve_count":20,"kev_count":11,"has_kev":17},"2.1\\(0.229\\)",{"version":100,"cve_count":20,"kev_count":11,"has_kev":17},"2.1\\(0.905\\)",{"version":102,"cve_count":20,"kev_count":11,"has_kev":17},"2.2\\(0.231\\)",{"version":104,"cve_count":26,"kev_count":11,"has_kev":17},"2.3\\(0.298\\)",{"version":106,"cve_count":20,"kev_count":11,"has_kev":17},"2.4\\(0.126\\)",{"version":108,"cve_count":20,"kev_count":11,"has_kev":17},"2.4\\(0.183\\)",{"version":110,"cve_count":20,"kev_count":11,"has_kev":17},"2.4\\(0.223\\)",{"version":112,"cve_count":35,"kev_count":11,"has_kev":17},"2.4\\(0.357\\)","Identity Services Engine Software by Cisco is a technology product with 46 tracked versions and 49 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":26,"kev_count":11,"has_kev":17},{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},{"version":32,"cve_count":16,"kev_count":11,"has_kev":17},{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},{"version":37,"cve_count":23,"kev_count":11,"has_kev":17},{"version":39,"cve_count":23,"kev_count":11,"has_kev":17},{"version":41,"cve_count":23,"kev_count":11,"has_kev":17},{"version":43,"cve_count":20,"kev_count":11,"has_kev":17},{"version":45,"cve_count":26,"kev_count":11,"has_kev":17},{"version":47,"cve_count":26,"kev_count":11,"has_kev":17},{"version":49,"cve_count":23,"kev_count":11,"has_kev":17},{"version":51,"cve_count":23,"kev_count":11,"has_kev":17},{"version":53,"cve_count":23,"kev_count":11,"has_kev":17},{"version":55,"cve_count":26,"kev_count":11,"has_kev":17},{"version":57,"cve_count":26,"kev_count":11,"has_kev":17},{"version":59,"cve_count":23,"kev_count":11,"has_kev":17},{"version":61,"cve_count":35,"kev_count":11,"has_kev":17},{"version":63,"cve_count":26,"kev_count":11,"has_kev":17},{"version":65,"cve_count":20,"kev_count":11,"has_kev":17},{"version":67,"cve_count":23,"kev_count":11,"has_kev":17},{"version":69,"cve_count":70,"kev_count":11,"has_kev":17},{"version":72,"cve_count":23,"kev_count":11,"has_kev":17},{"version":74,"cve_count":23,"kev_count":11,"has_kev":17},{"version":76,"cve_count":20,"kev_count":11,"has_kev":17},{"version":78,"cve_count":26,"kev_count":11,"has_kev":17},{"version":80,"cve_count":23,"kev_count":11,"has_kev":17},{"version":82,"cve_count":26,"kev_count":11,"has_kev":17},{"version":84,"cve_count":20,"kev_count":11,"has_kev":17},{"version":86,"cve_count":20,"kev_count":11,"has_kev":17},{"version":88,"cve_count":20,"kev_count":11,"has_kev":17},{"version":90,"cve_count":20,"kev_count":11,"has_kev":17},{"version":92,"cve_count":20,"kev_count":11,"has_kev":17},{"version":94,"cve_count":20,"kev_count":11,"has_kev":17},{"version":96,"cve_count":20,"kev_count":11,"has_kev":17},{"version":98,"cve_count":20,"kev_count":11,"has_kev":17},{"version":100,"cve_count":20,"kev_count":11,"has_kev":17},{"version":102,"cve_count":20,"kev_count":11,"has_kev":17},{"version":104,"cve_count":26,"kev_count":11,"has_kev":17},{"version":106,"cve_count":20,"kev_count":11,"has_kev":17},{"version":108,"cve_count":20,"kev_count":11,"has_kev":17},{"version":110,"cve_count":20,"kev_count":11,"has_kev":17},{"version":112,"cve_count":35,"kev_count":11,"has_kev":17},[162,170,177,182,188,193,199,204,211,216],{"cveId":163,"description":164,"publishedDate":165,"cvssScore":166,"cvssVersion":167,"severity":168,"isKev":17,"epssScore":169},"CVE-2015-6323","The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253.","2016-01-15",9.8,"v3.0","Critical",0.0302,{"cveId":171,"description":172,"publishedDate":173,"cvssScore":70,"cvssVersion":174,"severity":175,"isKev":17,"epssScore":176},"CVE-2015-0757","The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140.","2015-05-29","v2","Medium",0.02498,{"cveId":178,"description":179,"publishedDate":180,"cvssScore":16,"cvssVersion":174,"severity":168,"isKev":17,"epssScore":181},"CVE-2013-5530","The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1 before 1.1.1.268-7, 1.1.2 before 1.1.2.145-10, 1.1.3 before 1.1.3.124-7, 1.1.4 before 1.1.4.218-7, and 1.2 before 1.2.0.899-2 allows remote authenticated users to execute arbitrary commands via a crafted session on TCP port 443, aka Bug ID CSCuh81511.","2013-10-25",0.02291,{"cveId":183,"description":184,"publishedDate":185,"cvssScore":186,"cvssVersion":174,"severity":168,"isKev":17,"epssScore":187},"CVE-2011-3290","Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135.","2011-09-21",10,0.0228,{"cveId":189,"description":190,"publishedDate":191,"cvssScore":35,"cvssVersion":174,"severity":175,"isKev":17,"epssScore":192},"CVE-2014-3276","Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packets from two origins, aka Bug ID CSCuo56780.","2014-05-26",0.0219,{"cveId":194,"description":195,"publishedDate":196,"cvssScore":197,"cvssVersion":174,"severity":175,"isKev":17,"epssScore":198},"CVE-2015-4182","The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change settings, via unspecified vectors, aka Bug ID CSCui72087.","2015-06-12",5.5,0.02074,{"cveId":200,"description":201,"publishedDate":202,"cvssScore":35,"cvssVersion":174,"severity":175,"isKev":17,"epssScore":203},"CVE-2015-4219","Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331.","2015-06-24",0.02049,{"cveId":205,"description":206,"publishedDate":207,"cvssScore":208,"cvssVersion":167,"severity":209,"isKev":17,"epssScore":210},"CVE-2017-12316","A vulnerability in the Guest Portal login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform multiple login attempts in excess of the configured login attempt limit. The vulnerability is due to insufficient server-side login attempt limit enforcement. An attacker could exploit this vulnerability by sending modified login attempts to the Guest Portal login page. An exploit could allow the attacker to perform brute-force password attacks on the ISE Guest Portal. Cisco Bug IDs: CSCve98518.","2017-11-16",7.5,"High",0.02033,{"cveId":212,"description":213,"publishedDate":214,"cvssScore":208,"cvssVersion":167,"severity":209,"isKev":17,"epssScore":215},"CVE-2016-1402","The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service (authentication outage) via a crafted Password Authentication Protocol (PAP) authentication request, aka Bug ID CSCun25815.","2016-05-21",0.01993,{"cveId":217,"description":218,"publishedDate":219,"cvssScore":220,"cvssVersion":167,"severity":175,"isKev":17,"epssScore":221},"CVE-2016-9214","Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvb86332 CSCvb86760. Known Affected Releases: 2.0(101.130).","2016-12-14",6.1,0.01799,[],{"title":224,"metaDescription":225,"keywords":226,"structuredData":227},"Identity Services Engine Software by Cisco - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Identity Services Engine Software by Cisco covering 46 versions with 49 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Identity Services Engine Software vulnerabilities, Identity Services Engine Software security, Identity Services Engine Software CVE, Cisco Identity Services Engine Software, Identity Services Engine Software threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":228,"@type":229,"name":230,"description":225,"url":231,"manufacturer":232,"applicationCategory":236,"softwareVersion":237,"mainEntity":238},"https:\u002F\u002Fschema.org","SoftwareApplication","Identity Services Engine Software","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fidentity_services_engine_software",{"@type":233,"name":234,"url":235},"Organization","Cisco","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcisco","Security Software","46 versions tracked",{"@type":239,"name":240,"description":241,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Identity Services Engine Software Security Vulnerabilities","Security vulnerabilities affecting Identity Services Engine Software by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":243,"apiVersion":244},"2026-10-28T21:11:44.012Z","3.0",{"rows":246,"total":11,"capped":17,"failed":11},[],[]]