CI
Product
Cisco Identity Services Engine Software
On CISA KEVExploited in the wild
148
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 21High 31Medium 94Low 2
Watch
Add Cisco Identity Services Engine Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20195 | 5.3 | May 6 | Cisco Identity Services Engine Observable Response Discrepancy Vulnerability Affected: 3.3.0; 3.3 Patch 2; 3.3 Patch 1; 3.3 Patch 3; 3.4.0; 3.3 Patch 4; +15 more |
| CVE-2022-20937 | 5.3 | Nov 3 | A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to negatively affect… Affected: 2.6.0; 2.6.0 p1; 2.6.0 p2; 2.6.0 p3; 2.6.0 p5; 2.6.0 p6; +22 more |
| CVE-2026-76426 | 4.9 | Sep 16 | Cisco ISE REST API SQL Injection Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-76431 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Deletion Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-76427 | 4.9 | Sep 16 | Cisco ISE XML External Entity Injection Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-20072 | 4.9 | Sep 16 | ISE information disclosure Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-76446 | 4.9 | Sep 16 | Cisco Identity Services Engine External Entity Injection Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-76432 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Write Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-76448 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-76434 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Read Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-76451 | 4.9 | Sep 16 | Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-20235 | 4.9 | Sep 16 | Cisco Identity Services Engine Information Disclosure Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-76449 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-76450 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-76428 | 4.9 | Sep 16 | Cisco ISE Profiler SQL Injection Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-20282 | 4.9 | Sep 16 | Cisco Identity Services Engine Authenticated Write Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-20148 | 4.9 | Apr 15 | Cisco Identity Services Engine Path Traversal Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +32 more |
| CVE-2026-20029 | 4.9 | Jan 7 | Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +25 more |
| CVE-2025-20305 | 4.9 | Nov 5 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.1.0 p4; 3.1.0 p5; +23 more |
| CVE-2025-20131 | 4.9 | Aug 20 | Cisco Identity Services Engine Arbitrary File Upload Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +15 more |
| CVE-2024-20476 | 4.9 | Nov 6 | Cisco Identity Services Engine Authorization Bypass Vulnerability Affected: 3.0.0; 3.0.0 p1; 3.0.0 p2; 3.0.0 p3; 3.1.0; 3.0.0 p4; +25 more |
| CVE-2024-20466 | 4.9 | Aug 21 | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability Affected: 2.7.0; 2.7.0 p1; 2.7.0 p2; 3.0.0; 3.0.0 p1; 2.7.0 p3; +27 more |
| CVE-2023-20194 | 4.9 | Sep 7 | A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device Affected: 2.6.0; 2.6.0 p1; 2.6.0 p2; 2.6.0 p3; 2.6.0 p5; 2.6.0 p6; +33 more |
| CVE-2023-20167 | 4.9 | May 18 | Cisco Identity Services Engine Path Traversal Vulnerabilities Affected: All versions, or not specified |
| CVE-2023-20172 | 4.9 | May 18 | Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities Affected: All versions, or not specified |
| CVE-2023-20173 | 4.9 | May 18 | Cisco Identity Services Engine XML External Entity Injection Vulnerabilities Affected: All versions, or not specified |
| CVE-2023-20174 | 4.9 | May 18 | Cisco Identity Services Engine XML External Entity Injection Vulnerabilities Affected: All versions, or not specified |
| CVE-2022-20914 | 4.9 | Aug 10 | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2026-20132 | 4.8 | Apr 15 | Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +20 more |
| CVE-2026-20047 | 4.8 | Jan 15 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +25 more |
| CVE-2026-20076 | 4.8 | Jan 15 | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +19 more |
| CVE-2025-20267 | 4.8 | May 21 | Cisco Identity Services Stored Cross-Site Scripting Vulnerability Affected: 3.0.0; 3.0.0 p1; 3.0.0 p2; 3.0.0 p3; 3.1.0; 3.0.0 p4; +28 more |
| CVE-2025-20205 | 4.8 | Feb 5 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenticated, remote attacker to conduct… Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.1.0 p4; 3.1.0 p5; +34 more |
| CVE-2025-20204 | 4.8 | Feb 5 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenticated, remote attacker to conduct… Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.1.0 p4; 3.1.0 p5; +34 more |
| CVE-2024-20539 | 4.8 | Nov 6 | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability Affected: 3.0.0; 3.0.0 p1; 3.0.0 p2; 3.0.0 p3; 3.1.0; 3.0.0 p4; +22 more |
| CVE-2024-20479 | 4.8 | Aug 7 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface Affected: 2.7.0; 2.7.0 p1; 2.7.0 p2; 2.7.0 p3; 2.7.0 p4; 2.7.0 p5; +33 more |
| CVE-2023-20208 | 4.8 | Nov 21 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the web-based… Affected: 3.0.0; 3.0.0 p1; 3.0.0 p2; 3.0.0 p3; 3.0.0 p4; 3.0.0 p5; +7 more |
| CVE-2026-20285 | 4.3 | Sep 16 | Cisco Identity Services Engine Authorization Bypass Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-20286 | 4.3 | Sep 16 | Cisco Identity Services Engine Authorization Bypass Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-20193 | 4.3 | May 6 | Cisco Identity Services Engine Authentication Bypass Vulnerability Affected: 3.3.0; 3.3 Patch 2; 3.3 Patch 1; 3.3 Patch 3; 3.4.0; 3.3 Patch 4; +15 more |
| CVE-2025-20332 | 4.3 | Aug 6 | Cisco Identity Services Engine Authorization Bypass Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +17 more |
| CVE-2020-3525 | 4.3 | Nov 18 | Cisco Identity Services Engine Password Disclosure to an Unauthorized Actor Vulnerability Affected: All versions, or not specified |
| CVE-2023-20213 | 4.3 | Nov 1 | A vulnerability in the CDP processing feature of Cisco ISE could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of the CDP process on an… Affected: 2.6.0; 2.6.0 p1; 2.6.0 p2; 2.6.0 p3; 2.6.0 p5; 2.6.0 p6; +30 more |
| CVE-2025-20285 | 4.1 | Jul 16 | Cisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +22 more |