GCVE - cpe:2.3:a:cisco:identity_services_engine:2.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:identity_services_engine:2.7:*:*:*:*:*:*:*

part: a version: 2.7 update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Identity Services Engine (`011c03e7-b2d7-5c7f-b5e2-bb8fcd2ac19f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-20251`	vulnerable	2026-06-08 06:27:17.669329	Details available MEDIUM (4.8) A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Published: 2024-01-17T16:55:07.485Z Updated: 2024-10-21T11:54:43.472Z Open on db.gcve.eu Reference links https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-XSS-bL4VTML	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40123`	vulnerable	2026-06-08 05:35:16.937210	Cisco Identity Services Engine File Download Vulnerability MEDIUM (4.3) A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative read-only privileges to download files that should be restricted. This vulnerability is due to incorrect permissions settings on an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request to the device. A successful exploit could allow the attacker to download files that should be restricted. Published: 2021-10-21T02:50:44.795Z Updated: 2024-11-07T21:46:40.818Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-download-B3BR5KQA	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40121`	vulnerable	2026-06-08 05:35:16.923943	Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities MEDIUM (6.1) Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2021-10-21T02:50:33.927Z Updated: 2024-11-07T21:46:53.737Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss1-rgxYry2V	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34738`	vulnerable	2026-06-08 05:32:16.343305	Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities MEDIUM (6.1) Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2021-10-21T02:50:11.767Z Updated: 2024-11-07T21:47:31.025Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss1-rgxYry2V	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3551`	vulnerable	2026-06-08 05:25:55.953435	Cisco Identity Services Engine Cross-Site Scripting Vulnerability MEDIUM (6.1) A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Published: 2020-11-06T18:16:17.988Z Updated: 2024-11-13T17:43:31.803Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-euRCwX9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3467`	vulnerable	2026-06-08 05:25:55.433901	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3156`	vulnerable	2026-06-08 05:25:51.073684	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.