Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:identity_services_engine_software:1.3\(0.876\):*:*:*:*:*:*:*

part: a version: 1.3(0.876) update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductIdentity Services Engine Software (5fde0f88-aa3c-59cb-88e4-65b249a110ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-1485 vulnerable 2026-06-08 05:07:31.522876 Details available
Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497.
Published: 2016-08-22T10:00:00.000Z
Updated: 2024-08-05T22:55:14.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6323 vulnerable 2026-06-08 05:06:51.877205 Details available
The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253.
Published: 2016-01-15T02:00:00.000Z
Updated: 2024-08-06T07:15:13.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6317 vulnerable 2026-06-08 05:06:51.799117 Details available
Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926.
Published: 2016-01-23T02:00:00.000Z
Updated: 2024-08-06T07:15:13.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4268 vulnerable 2026-06-08 05:06:39.520736 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine (ISE) 1.2(1.198) and 1.3(0.876) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCus16052.
Published: 2015-07-14T17:00:00.000Z
Updated: 2024-08-06T06:11:12.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4267 vulnerable 2026-06-08 05:06:39.517542 Details available
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(0.793), 1.3(0.876), 1.4(0.109), 2.0(0.147), and 2.0(0.169) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus09940.
Published: 2015-07-15T18:00:00.000Z
Updated: 2024-08-06T06:11:12.160Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.