[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMit8NXhABtpOvuPfqZrVybKOgScsE09avyBS2YYGnk4":3,"g5a-family:cisco\u002Fidentity_services_engine":458,"g5a-ex:cisco\u002Fidentity_services_engine@*":468},{"success":4,"data":5},true,{"product":6,"versions":255,"topVulnerabilitiesByEpss":367,"kevVulnerabilities":425,"seoMetadata":436,"meta":455},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":254},"cisco","identity_services_engine",111,149,3,"2025-07-16",[14,18,20,22,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,112,114,116,118,120,123,125,127,129,131,133,135,138,140,142,144,146,148,150,152,154,156,158,160,162,164,167,169,171,174,177,179,181,183,185,187,189,191,193,195,197,199,202,204,206,208,210,213,215,217,219,221,223,226,228,230,233,235,237,240,243,245,247,250,252],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"002.002\\(000.916\\)",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"002.003\\(000.906\\)",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"002.004\\(000.911\\)",{"version":23,"cve_count":24,"kev_count":25,"has_kev":4},"002.004\\(000.914\\)",2,1,{"version":27,"cve_count":24,"kev_count":25,"has_kev":4},"002.006\\(000.156\\)",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"002.006\\\\(000.156\\\\)",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"002.006\\(000.902\\)",{"version":33,"cve_count":24,"kev_count":25,"has_kev":4},"002.007\\(000.356\\)",{"version":35,"cve_count":24,"kev_count":25,"has_kev":4},"003.000\\(000.458\\)",{"version":37,"cve_count":25,"kev_count":25,"has_kev":4},"003.001\\(000.518\\)",{"version":39,"cve_count":25,"kev_count":25,"has_kev":4},"003.002\\(000.116\\)",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"003.002\\\\(000.116\\\\)",{"version":43,"cve_count":25,"kev_count":16,"has_kev":17},"1.0",{"version":45,"cve_count":25,"kev_count":16,"has_kev":17},"1.0.4",{"version":47,"cve_count":25,"kev_count":16,"has_kev":17},"1.1",{"version":49,"cve_count":25,"kev_count":16,"has_kev":17},"1.1.1",{"version":51,"cve_count":25,"kev_count":16,"has_kev":17},"1.1.2",{"version":53,"cve_count":25,"kev_count":16,"has_kev":17},"1.1.3",{"version":55,"cve_count":25,"kev_count":16,"has_kev":17},"1.1.4",{"version":57,"cve_count":25,"kev_count":16,"has_kev":17},"1.2",{"version":59,"cve_count":25,"kev_count":16,"has_kev":17},"1.2.1",{"version":61,"cve_count":24,"kev_count":16,"has_kev":17},"1.2\\(1.199\\)",{"version":63,"cve_count":25,"kev_count":16,"has_kev":17},"1.3",{"version":65,"cve_count":11,"kev_count":16,"has_kev":17},"1.3\\(0.722\\)",{"version":67,"cve_count":68,"kev_count":16,"has_kev":17},"1.3\\(0.876\\)",4,{"version":70,"cve_count":11,"kev_count":16,"has_kev":17},"1.3\\(0.909\\)",{"version":72,"cve_count":11,"kev_count":16,"has_kev":17},"1.3\\(106.146\\)",{"version":74,"cve_count":11,"kev_count":16,"has_kev":17},"1.3\\(120.135\\)",{"version":76,"cve_count":24,"kev_count":16,"has_kev":17},"1.4",{"version":78,"cve_count":24,"kev_count":16,"has_kev":17},"1.4\\(0.109\\)",{"version":80,"cve_count":24,"kev_count":16,"has_kev":17},"1.4\\(0.181\\)",{"version":82,"cve_count":24,"kev_count":16,"has_kev":17},"1.4\\(0.253\\)",{"version":84,"cve_count":24,"kev_count":16,"has_kev":17},"1.4\\(0.908\\)",{"version":86,"cve_count":24,"kev_count":16,"has_kev":17},"2.0",{"version":88,"cve_count":24,"kev_count":16,"has_kev":17},"2.0\\(0.147\\)",{"version":90,"cve_count":24,"kev_count":16,"has_kev":17},"2.0\\(0.169\\)",{"version":92,"cve_count":24,"kev_count":16,"has_kev":17},"2.0\\(0.222\\)",{"version":94,"cve_count":24,"kev_count":16,"has_kev":17},"2.0\\(0.234\\)",{"version":96,"cve_count":11,"kev_count":16,"has_kev":17},"2.0\\(0.249\\)",{"version":98,"cve_count":24,"kev_count":16,"has_kev":17},"2.0\\(0.306\\)",{"version":100,"cve_count":24,"kev_count":16,"has_kev":17},"2.0.1",{"version":102,"cve_count":11,"kev_count":16,"has_kev":17},"2.0\\(1.130\\)",{"version":104,"cve_count":25,"kev_count":16,"has_kev":17},"2.0_base",{"version":106,"cve_count":25,"kev_count":16,"has_kev":17},"2.1",{"version":108,"cve_count":25,"kev_count":16,"has_kev":17},"2.1.0",{"version":110,"cve_count":111,"kev_count":16,"has_kev":17},"2.1\\(0.474\\)",10,{"version":113,"cve_count":24,"kev_count":16,"has_kev":17},"2.1\\(0.476\\)",{"version":115,"cve_count":68,"kev_count":16,"has_kev":17},"2.1\\(0.800\\)",{"version":117,"cve_count":11,"kev_count":16,"has_kev":17},"2.1\\(0.904\\)",{"version":119,"cve_count":11,"kev_count":16,"has_kev":17},"2.1\\(0.907\\)",{"version":121,"cve_count":122,"kev_count":16,"has_kev":17},"2.1\\(102.101\\)",5,{"version":124,"cve_count":24,"kev_count":16,"has_kev":17},"2.1\\(102.103\\)",{"version":126,"cve_count":24,"kev_count":16,"has_kev":17},"2.1_base",{"version":128,"cve_count":24,"kev_count":16,"has_kev":17},"2.2",{"version":130,"cve_count":68,"kev_count":16,"has_kev":17},"2.2.0",{"version":132,"cve_count":24,"kev_count":16,"has_kev":17},"2.2\\(0.283\\)",{"version":134,"cve_count":11,"kev_count":16,"has_kev":17},"2.2.0.470",{"version":136,"cve_count":137,"kev_count":16,"has_kev":17},"2.2\\(0.470\\)",9,{"version":139,"cve_count":24,"kev_count":16,"has_kev":17},"2.2\\(0.471\\)",{"version":141,"cve_count":24,"kev_count":16,"has_kev":17},"2.2\\(0.903\\)",{"version":143,"cve_count":24,"kev_count":16,"has_kev":17},"2.2\\(0.909\\)",{"version":145,"cve_count":24,"kev_count":16,"has_kev":17},"2.2\\(0.910\\)",{"version":147,"cve_count":24,"kev_count":16,"has_kev":17},"2.2\\(1.145\\)",{"version":149,"cve_count":24,"kev_count":16,"has_kev":17},"2.3",{"version":151,"cve_count":122,"kev_count":16,"has_kev":17},"2.3.0",{"version":153,"cve_count":24,"kev_count":16,"has_kev":17},"2.3\\(0.151\\)",{"version":155,"cve_count":68,"kev_count":16,"has_kev":17},"2.3.0.298",{"version":157,"cve_count":137,"kev_count":16,"has_kev":17},"2.3\\(0.298\\)",{"version":159,"cve_count":25,"kev_count":16,"has_kev":17},"2.3\\(0.904\\)",{"version":161,"cve_count":11,"kev_count":16,"has_kev":17},"2.3\\(0.905\\)",{"version":163,"cve_count":11,"kev_count":16,"has_kev":17},"2.4",{"version":165,"cve_count":166,"kev_count":25,"has_kev":4},"2.4.0",8,{"version":168,"cve_count":24,"kev_count":16,"has_kev":17},"2.4\\(0.192\\)",{"version":170,"cve_count":24,"kev_count":16,"has_kev":17},"2.4\\(0.247\\)",{"version":172,"cve_count":173,"kev_count":16,"has_kev":17},"2.4.0.357",6,{"version":175,"cve_count":176,"kev_count":16,"has_kev":17},"2.4\\(0.357\\)",7,{"version":178,"cve_count":24,"kev_count":16,"has_kev":17},"2.4\\(0.901\\)",{"version":180,"cve_count":24,"kev_count":16,"has_kev":17},"2.4\\(0.901.1\\)",{"version":182,"cve_count":11,"kev_count":16,"has_kev":17},"2.4\\(0.902\\)",{"version":184,"cve_count":24,"kev_count":16,"has_kev":17},"2.4\\(0.903\\)",{"version":186,"cve_count":24,"kev_count":16,"has_kev":17},"2.4\\(0.904\\)",{"version":188,"cve_count":24,"kev_count":16,"has_kev":17},"2.4\\(100.159\\)",{"version":190,"cve_count":24,"kev_count":16,"has_kev":17},"2.5",{"version":192,"cve_count":24,"kev_count":16,"has_kev":17},"2.5\\(0.1\\)",{"version":194,"cve_count":24,"kev_count":16,"has_kev":17},"2.5\\(0.225\\)",{"version":196,"cve_count":24,"kev_count":16,"has_kev":17},"2.5\\(0.353\\)",{"version":198,"cve_count":11,"kev_count":16,"has_kev":17},"2.6",{"version":200,"cve_count":201,"kev_count":16,"has_kev":17},"2.6.0",27,{"version":203,"cve_count":68,"kev_count":16,"has_kev":17},"2.6.0.156",{"version":205,"cve_count":173,"kev_count":16,"has_kev":17},"2.6\\(0.156\\)",{"version":207,"cve_count":176,"kev_count":16,"has_kev":17},"2.6\\(0.999\\)",{"version":209,"cve_count":176,"kev_count":16,"has_kev":17},"2.7",{"version":211,"cve_count":212,"kev_count":16,"has_kev":17},"2.7.0",35,{"version":214,"cve_count":122,"kev_count":16,"has_kev":17},"2.7\\(0.207\\)",{"version":216,"cve_count":11,"kev_count":16,"has_kev":17},"2.7.0.356",{"version":218,"cve_count":111,"kev_count":16,"has_kev":17},"2.7\\(0.356\\)",{"version":220,"cve_count":122,"kev_count":16,"has_kev":17},"2.7\\(0.903\\)",{"version":222,"cve_count":25,"kev_count":16,"has_kev":17},"2.7\\(0.999\\)",{"version":224,"cve_count":225,"kev_count":16,"has_kev":17},"3.0.0",45,{"version":227,"cve_count":122,"kev_count":16,"has_kev":17},"3.0\\(0.458\\)",{"version":229,"cve_count":212,"kev_count":16,"has_kev":17},"3.1",{"version":231,"cve_count":232,"kev_count":16,"has_kev":17},"3.1.0",20,{"version":234,"cve_count":25,"kev_count":16,"has_kev":17},"3.1\\(0.440\\)",{"version":236,"cve_count":25,"kev_count":16,"has_kev":17},"3.1\\(0.518\\)",{"version":238,"cve_count":239,"kev_count":16,"has_kev":17},"3.2",39,{"version":241,"cve_count":242,"kev_count":16,"has_kev":17},"3.2.0",24,{"version":244,"cve_count":25,"kev_count":16,"has_kev":17},"3.2\\(0.149\\)",{"version":246,"cve_count":11,"kev_count":16,"has_kev":17},"3.3",{"version":248,"cve_count":249,"kev_count":24,"has_kev":4},"3.3.0",26,{"version":251,"cve_count":25,"kev_count":16,"has_kev":17},"3300",{"version":253,"cve_count":137,"kev_count":24,"has_kev":4},"3.4.0","Identity Services Engine by Cisco is a technology product with 111 tracked versions and 149 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":24,"kev_count":25,"has_kev":4},{"version":27,"cve_count":24,"kev_count":25,"has_kev":4},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":24,"kev_count":25,"has_kev":4},{"version":35,"cve_count":24,"kev_count":25,"has_kev":4},{"version":37,"cve_count":25,"kev_count":25,"has_kev":4},{"version":39,"cve_count":25,"kev_count":25,"has_kev":4},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":25,"kev_count":16,"has_kev":17},{"version":45,"cve_count":25,"kev_count":16,"has_kev":17},{"version":47,"cve_count":25,"kev_count":16,"has_kev":17},{"version":49,"cve_count":25,"kev_count":16,"has_kev":17},{"version":51,"cve_count":25,"kev_count":16,"has_kev":17},{"version":53,"cve_count":25,"kev_count":16,"has_kev":17},{"version":55,"cve_count":25,"kev_count":16,"has_kev":17},{"version":57,"cve_count":25,"kev_count":16,"has_kev":17},{"version":59,"cve_count":25,"kev_count":16,"has_kev":17},{"version":61,"cve_count":24,"kev_count":16,"has_kev":17},{"version":63,"cve_count":25,"kev_count":16,"has_kev":17},{"version":65,"cve_count":11,"kev_count":16,"has_kev":17},{"version":67,"cve_count":68,"kev_count":16,"has_kev":17},{"version":70,"cve_count":11,"kev_count":16,"has_kev":17},{"version":72,"cve_count":11,"kev_count":16,"has_kev":17},{"version":74,"cve_count":11,"kev_count":16,"has_kev":17},{"version":76,"cve_count":24,"kev_count":16,"has_kev":17},{"version":78,"cve_count":24,"kev_count":16,"has_kev":17},{"version":80,"cve_count":24,"kev_count":16,"has_kev":17},{"version":82,"cve_count":24,"kev_count":16,"has_kev":17},{"version":84,"cve_count":24,"kev_count":16,"has_kev":17},{"version":86,"cve_count":24,"kev_count":16,"has_kev":17},{"version":88,"cve_count":24,"kev_count":16,"has_kev":17},{"version":90,"cve_count":24,"kev_count":16,"has_kev":17},{"version":92,"cve_count":24,"kev_count":16,"has_kev":17},{"version":94,"cve_count":24,"kev_count":16,"has_kev":17},{"version":96,"cve_count":11,"kev_count":16,"has_kev":17},{"version":98,"cve_count":24,"kev_count":16,"has_kev":17},{"version":100,"cve_count":24,"kev_count":16,"has_kev":17},{"version":102,"cve_count":11,"kev_count":16,"has_kev":17},{"version":104,"cve_count":25,"kev_count":16,"has_kev":17},{"version":106,"cve_count":25,"kev_count":16,"has_kev":17},{"version":108,"cve_count":25,"kev_count":16,"has_kev":17},{"version":110,"cve_count":111,"kev_count":16,"has_kev":17},{"version":113,"cve_count":24,"kev_count":16,"has_kev":17},{"version":115,"cve_count":68,"kev_count":16,"has_kev":17},{"version":117,"cve_count":11,"kev_count":16,"has_kev":17},{"version":119,"cve_count":11,"kev_count":16,"has_kev":17},{"version":121,"cve_count":122,"kev_count":16,"has_kev":17},{"version":124,"cve_count":24,"kev_count":16,"has_kev":17},{"version":126,"cve_count":24,"kev_count":16,"has_kev":17},{"version":128,"cve_count":24,"kev_count":16,"has_kev":17},{"version":130,"cve_count":68,"kev_count":16,"has_kev":17},{"version":132,"cve_count":24,"kev_count":16,"has_kev":17},{"version":134,"cve_count":11,"kev_count":16,"has_kev":17},{"version":136,"cve_count":137,"kev_count":16,"has_kev":17},{"version":139,"cve_count":24,"kev_count":16,"has_kev":17},{"version":141,"cve_count":24,"kev_count":16,"has_kev":17},{"version":143,"cve_count":24,"kev_count":16,"has_kev":17},{"version":145,"cve_count":24,"kev_count":16,"has_kev":17},{"version":147,"cve_count":24,"kev_count":16,"has_kev":17},{"version":149,"cve_count":24,"kev_count":16,"has_kev":17},{"version":151,"cve_count":122,"kev_count":16,"has_kev":17},{"version":153,"cve_count":24,"kev_count":16,"has_kev":17},{"version":155,"cve_count":68,"kev_count":16,"has_kev":17},{"version":157,"cve_count":137,"kev_count":16,"has_kev":17},{"version":159,"cve_count":25,"kev_count":16,"has_kev":17},{"version":161,"cve_count":11,"kev_count":16,"has_kev":17},{"version":163,"cve_count":11,"kev_count":16,"has_kev":17},{"version":165,"cve_count":166,"kev_count":25,"has_kev":4},{"version":168,"cve_count":24,"kev_count":16,"has_kev":17},{"version":170,"cve_count":24,"kev_count":16,"has_kev":17},{"version":172,"cve_count":173,"kev_count":16,"has_kev":17},{"version":175,"cve_count":176,"kev_count":16,"has_kev":17},{"version":178,"cve_count":24,"kev_count":16,"has_kev":17},{"version":180,"cve_count":24,"kev_count":16,"has_kev":17},{"version":182,"cve_count":11,"kev_count":16,"has_kev":17},{"version":184,"cve_count":24,"kev_count":16,"has_kev":17},{"version":186,"cve_count":24,"kev_count":16,"has_kev":17},{"version":188,"cve_count":24,"kev_count":16,"has_kev":17},{"version":190,"cve_count":24,"kev_count":16,"has_kev":17},{"version":192,"cve_count":24,"kev_count":16,"has_kev":17},{"version":194,"cve_count":24,"kev_count":16,"has_kev":17},{"version":196,"cve_count":24,"kev_count":16,"has_kev":17},{"version":198,"cve_count":11,"kev_count":16,"has_kev":17},{"version":200,"cve_count":201,"kev_count":16,"has_kev":17},{"version":203,"cve_count":68,"kev_count":16,"has_kev":17},{"version":205,"cve_count":173,"kev_count":16,"has_kev":17},{"version":207,"cve_count":176,"kev_count":16,"has_kev":17},{"version":209,"cve_count":176,"kev_count":16,"has_kev":17},{"version":211,"cve_count":212,"kev_count":16,"has_kev":17},{"version":214,"cve_count":122,"kev_count":16,"has_kev":17},{"version":216,"cve_count":11,"kev_count":16,"has_kev":17},{"version":218,"cve_count":111,"kev_count":16,"has_kev":17},{"version":220,"cve_count":122,"kev_count":16,"has_kev":17},{"version":222,"cve_count":25,"kev_count":16,"has_kev":17},{"version":224,"cve_count":225,"kev_count":16,"has_kev":17},{"version":227,"cve_count":122,"kev_count":16,"has_kev":17},{"version":229,"cve_count":212,"kev_count":16,"has_kev":17},{"version":231,"cve_count":232,"kev_count":16,"has_kev":17},{"version":234,"cve_count":25,"kev_count":16,"has_kev":17},{"version":236,"cve_count":25,"kev_count":16,"has_kev":17},{"version":238,"cve_count":239,"kev_count":16,"has_kev":17},{"version":241,"cve_count":242,"kev_count":16,"has_kev":17},{"version":244,"cve_count":25,"kev_count":16,"has_kev":17},{"version":246,"cve_count":11,"kev_count":16,"has_kev":17},{"version":248,"cve_count":249,"kev_count":24,"has_kev":4},{"version":251,"cve_count":25,"kev_count":16,"has_kev":17},{"version":253,"cve_count":137,"kev_count":24,"has_kev":4},[368,375,380,383,390,396,402,407,414,420],{"cveId":369,"description":370,"publishedDate":371,"cvssScore":111,"cvssVersion":372,"severity":373,"isKev":4,"epssScore":374},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10","v3.1","Critical",0.99999,{"cveId":376,"description":377,"publishedDate":378,"cvssScore":111,"cvssVersion":372,"severity":373,"isKev":4,"epssScore":379},"CVE-2025-20281","A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.","2025-06-25",0.96732,{"cveId":381,"description":377,"publishedDate":12,"cvssScore":111,"cvssVersion":372,"severity":373,"isKev":4,"epssScore":382},"CVE-2025-20337",0.65098,{"cveId":384,"description":385,"publishedDate":386,"cvssScore":387,"cvssVersion":372,"severity":388,"isKev":17,"epssScore":389},"CVE-2022-20964","A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system.\r\n\r This vulnerability is due to improper validation of user input within requests as part of the web-based management interface. An attacker could exploit this vulnerability by manipulating requests to the web-based management interface to contain operating system commands. A successful exploit could allow the attacker to execute arbitrary operating system commands on the underlying operating system with the privileges of the web services user.\r\n\r Cisco has not yet released software updates that address this vulnerability. ","2023-01-20",8.8,"High",0.30649,{"cveId":391,"description":392,"publishedDate":386,"cvssScore":393,"cvssVersion":372,"severity":394,"isKev":17,"epssScore":395},"CVE-2022-20966","A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attacks against other users of the application web-based management interface.\r\n\r This vulnerability is due to improper validation of input to an application feature before storage within the web-based management interface. An attacker could exploit this vulnerability by creating entries within the application interface that contain malicious HTML or script code. A successful exploit could allow the attacker to store malicious HTML or script code within the application interface for use in further cross-site scripting attacks.\r\n\r Cisco has not yet released software updates that address this vulnerability. ",5.4,"Medium",0.276,{"cveId":397,"description":398,"publishedDate":399,"cvssScore":400,"cvssVersion":372,"severity":373,"isKev":17,"epssScore":401},"CVE-2025-20124","A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device.\r\n\r\nThis vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object to an affected API. A successful exploit could allow the attacker to execute arbitrary commands on the device and elevate privileges.\r\nNote: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time.","2025-02-05",9.9,0.17218,{"cveId":403,"description":404,"publishedDate":399,"cvssScore":405,"cvssVersion":372,"severity":373,"isKev":17,"epssScore":406},"CVE-2025-20125","A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node.\r\n\r\nThis vulnerability is due to a lack of authorization in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted HTTP request to a specific API on the device. A successful exploit could allow the attacker to attacker to obtain information, modify system configuration, and reload the device.\r\nNote: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time.",9.1,0.14982,{"cveId":408,"description":409,"publishedDate":410,"cvssScore":411,"cvssVersion":412,"severity":373,"isKev":17,"epssScore":413},"CVE-2017-6747","A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass local authentication. The vulnerability is due to improper handling of authentication requests and policy assignment for externally authenticated users. An attacker could exploit this vulnerability by authenticating with a valid external user account that matches an internal username and incorrectly receiving the authorization policy of the internal account. An exploit could allow the attacker to have Super Admin privileges for the ISE Admin portal. This vulnerability does not affect endpoints authenticating to the ISE. The vulnerability affects Cisco ISE, Cisco ISE Express, and Cisco ISE Virtual Appliance running Release 1.3, 1.4, 2.0.0, 2.0.1, or 2.1.0. Release 2.2.x is not affected. Cisco Bug IDs: CSCvb10995.","2017-08-07",9.8,"v3.0",0.05476,{"cveId":415,"description":416,"publishedDate":417,"cvssScore":418,"cvssVersion":412,"severity":388,"isKev":17,"epssScore":419},"CVE-2016-9198","A vulnerability in the Active Directory integration component of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a denial of service (DoS) attack. More Information: CSCuw15041. Known Affected Releases: 1.2(1.199).","2016-12-14",7.5,0.03304,{"cveId":421,"description":422,"publishedDate":423,"cvssScore":387,"cvssVersion":412,"severity":388,"isKev":17,"epssScore":424},"CVE-2018-0213","A vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation. An attacker could exploit this vulnerability by authenticating to the device and sending a crafted HTTP request. A successful exploit could allow the attacker to gain elevated privileges to access functionality that should be restricted. The attacker must have valid user credentials to the device to exploit this vulnerability. Cisco Bug IDs: CSCvf69753.","2018-03-08",0.02616,[426,431,432],{"cveId":376,"description":377,"publishedDate":378,"cvssScore":111,"severity":373,"isKev":4,"epssScore":379,"cisaVulnName":427,"cisaDateAdded":428,"cisaShortDescription":429,"cisaRequiredAction":430},"Cisco Identity Services Engine Injection Vulnerability","2025-07-28","Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":381,"description":377,"publishedDate":12,"cvssScore":111,"severity":373,"isKev":4,"epssScore":382,"cisaVulnName":427,"cisaDateAdded":428,"cisaShortDescription":429,"cisaRequiredAction":430},{"cveId":369,"description":370,"publishedDate":371,"cvssScore":111,"severity":373,"isKev":4,"epssScore":374,"cisaVulnName":433,"cisaDateAdded":371,"cisaShortDescription":434,"cisaRequiredAction":435},"Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"title":437,"metaDescription":438,"keywords":439,"structuredData":440},"Identity Services Engine by Cisco - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Identity Services Engine by Cisco covering 111 versions with 149 tracked vulnerabilities including 3 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Identity Services Engine vulnerabilities, Identity Services Engine security, Identity Services Engine CVE, Cisco Identity Services Engine, Identity Services Engine threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Identity Services Engine KEV, Identity Services Engine exploited vulnerabilities",{"@context":441,"@type":442,"name":443,"description":438,"url":444,"manufacturer":445,"applicationCategory":449,"softwareVersion":450,"mainEntity":451},"https:\u002F\u002Fschema.org","SoftwareApplication","Identity Services Engine","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fidentity_services_engine",{"@type":446,"name":447,"url":448},"Organization","Cisco","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcisco","Security Software","111 versions tracked",{"@type":452,"name":453,"description":454,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Identity Services Engine Security Vulnerabilities","Security vulnerabilities affecting Identity Services Engine by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":456,"apiVersion":457},"2026-10-28T16:33:15.566Z","3.0",[459,462,464,466],{"product":460,"cves":461},"identity_services_engine_software",49,{"product":463,"cves":24},"identity_services_engine_passive_identity_connector",{"product":465,"cves":25},"identity_services_engine_express",{"product":467,"cves":25},"identity_services_engine_virtual_appliance",{"rows":469,"total":11,"capped":17,"failed":16},[470,481,485],{"cveId":376,"name":427,"severity":373,"cvss":111,"added":428,"epss":379,"published":471,"ranges":472,"checked":4,"hits":480,"covers":17},"2025-06-25T16:15:26.017",[248,473,474,475,476,477,478,253,479],"3.3.0-patch1","3.3.0-patch2","3.3.0-patch3","3.3.0-patch4","3.3.0-patch5","3.3.0-patch6","3.4.0-patch1",[],{"cveId":381,"name":427,"severity":373,"cvss":111,"added":428,"epss":382,"published":482,"ranges":483,"checked":4,"hits":484,"covers":17},"2025-07-16T17:15:30.573",[248,473,474,475,476,477,478,253,479],[],{"cveId":369,"name":433,"severity":373,"cvss":111,"added":371,"epss":374,"published":486,"ranges":487,"checked":4,"hits":492,"covers":17},"2021-12-10T10:15:09.143",[488,165,489,490,491],"before 2.4.0","003.000(000.458)","003.001(000.518)","003.002(000.116)",[]]