Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:identity_services_engine_software:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductIdentity Services Engine Software (5fde0f88-aa3c-59cb-88e4-65b249a110ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8022 vulnerable 2026-06-08 05:06:00.616018 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow remote attackers to inject arbitrary web script or HTML via input to unspecified web pages, aka Bug IDs CSCur69835 and CSCur69776.
Published: 2015-01-15T22:00:00.000Z
Updated: 2024-08-06T13:10:50.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8017 vulnerable 2026-06-08 05:06:00.609889 Details available
The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to discover backup-encryption passwords via a crafted request that triggers inclusion of a password in a reply, aka Bug ID CSCur41673.
Published: 2014-12-22T19:00:00.000Z
Updated: 2024-08-06T13:10:49.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8015 vulnerable 2026-06-08 05:06:00.607939 Details available
The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbitrary sponsor's guest account via a modified HTTP request, aka Bug ID CSCur64400.
Published: 2014-12-22T19:00:00.000Z
Updated: 2024-08-06T13:10:50.065Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0665 vulnerable 2026-06-08 05:05:13.963202 Details available
The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCul83904.
Published: 2014-01-15T15:00:00.000Z
Updated: 2024-08-06T09:20:19.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5541 vulnerable 2026-06-08 05:04:52.066357 Details available
Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename, aka Bug ID CSCui67495.
Published: 2013-10-16T10:00:00.000Z
Updated: 2024-09-16T22:09:16.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5540 vulnerable 2026-06-08 05:04:52.066068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5539 vulnerable 2026-06-08 05:04:52.065757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5538 vulnerable 2026-06-08 05:04:52.064482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5521 vulnerable 2026-06-08 05:04:52.039546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5505 vulnerable 2026-06-08 05:04:51.882547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5504 vulnerable 2026-06-08 05:04:51.882001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3471 vulnerable 2026-06-08 05:04:31.740559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3420 vulnerable 2026-06-08 05:04:31.458570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3413 vulnerable 2026-06-08 05:04:31.445938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1196 vulnerable 2026-06-08 05:03:53.142746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1125 vulnerable 2026-06-08 05:03:52.632347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5744 vulnerable 2026-06-08 05:02:58.163630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.