CI
Product
Cisco Identity Services Engine Software
On CISA KEVExploited in the wild
114
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 21High 22Medium 70Low 1
Watch
Add Cisco Identity Services Engine Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20486 | 8.8 | Aug 21 | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability Affected: 2.7.0; 2.7.0 p1; 2.7.0 p2; 3.0.0; 3.0.0 p1; 2.7.0 p3; +34 more |
| CVE-2022-20962 | 8.8 | Nov 3 | A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to make unauthorized changes to the file… Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3 |
| CVE-2022-20956 | 8.8 | Nov 3 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access… Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p4; 3.2.0 |
| CVE-2022-20961 | 8.8 | Nov 3 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: 2.6.0; 2.6.0 p1; 2.6.0 p2; 2.6.0 p3; 2.6.0 p5; 2.6.0 p6; +22 more |
| CVE-2026-20352 | 8.6 | Sep 16 | Cisco Identity Services Engine RADIUS Denial of Service Vulnerability Affected: 3.2.0; 3.2.0 p1; 3.2.0 p2; 3.3.0; 3.2.0 p3; 3.2.0 p4; +28 more |
| CVE-2025-20152 | 8.6 | May 21 | A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affe Affected: 3.4.0 |
| CVE-2024-20417 | 8.1 | Aug 21 | Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabities Affected: 2.7.0; 2.7.0 p1; 2.7.0 p2; 3.0.0; 3.0.0 p1; 2.7.0 p3; +34 more |
| CVE-2022-20822 | 8.1 | Oct 26 | Cisco Identity Services Engine Unauthorized File Access Vulnerability Affected: All versions, or not specified |
| CVE-2026-76425 | 7.6 | Sep 16 | Cisco ISE SQL Injection Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-20247 | 7.5 | Sep 16 | Cisco Identity Services Engine Unauthenticated SQL Injection Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2026-20190 | 7.5 | Jun 17 | Cisco Identity Services Engine Information Disclosure Vulnerability Affected: 3.4.0; 3.4 Patch 1; 3.4 Patch 2; 3.4 Patch 3; 3.5.0; 3.4 Patch 4; +3 more |
| CVE-2025-20343 | 7.5 | Nov 5 | Cisco Identity Services Engine Radius Suppression Denial of Service Vulnerability Affected: 3.4.0; 3.4 Patch 1; 3.4 Patch 2; 3.4 Patch 3 |
| CVE-2026-76424 | 7.2 | Sep 16 | Cisco ISE Arbitrary File Access Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
| CVE-2025-20284 | 7.2 | Jul 16 | Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability Affected: 3.3.0; 3.3 Patch 2; 3.3 Patch 1; 3.3 Patch 3; 3.4.0; 3.3 Patch 4; +3 more |
| CVE-2025-20283 | 7.2 | Jul 16 | Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability Affected: 3.3.0; 3.3 Patch 2; 3.3 Patch 1; 3.3 Patch 3; 3.4.0; 3.3 Patch 4; +3 more |
| CVE-2025-20130 | 7.2 | Jun 4 | Cisco Identity Services Engine Access Control Bypass Vulnerability Affected: 3.0.0; 3.0.0 p1; 3.0.0 p2; 3.0.0 p3; 3.1.0; 3.0.0 p4; +24 more |
| CVE-2025-20125 | 7.2 | Feb 5 | Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability Affected: 3.0.0; 3.0.0 p1; 3.0.0 p2; 3.0.0 p3; 3.1.0; 3.0.0 p4; +25 more |
| CVE-2025-20124 | 7.2 | Feb 5 | Cisco Identity Services Engine Java Deserialization Vulnerability Affected: 3.0.0; 3.0.0 p1; 3.0.0 p2; 3.0.0 p3; 3.1.0; 3.0.0 p4; +25 more |
| CVE-2024-20528 | 7.2 | Nov 6 | Cisco Identity Services Engine Path Traversal Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +15 more |
| CVE-2024-20296 | 7.2 | Jul 17 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an… Affected: 2.7.0; 2.7.0 p1; 2.7.0 p2; 2.7.0 p3; 2.7.0 p4; 2.7.0 p5; +32 more |
| CVE-2018-15459 | 7.2 | Jan 23 | Cisco Identity Services Engine Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2026-20300 | 7.1 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; +34 more |
Showing 22