GCVE - cpe:2.3:h:cisco:identity_services_engine:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:identity_services_engine:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Identity Services Engine (`011c03e7-b2d7-5c7f-b5e2-bb8fcd2ac19f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-0327`	not_vulnerable	2026-06-08 05:10:23.175944	Details available A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software via the HTTP GET and HTTP POST methods. An attacker who can convince a user to follow an attacker-supplied link could execute arbitrary script or HTML code in the user's browser in the context of an affected site. Cisco Bug IDs: CSCvg86743. Published: 2018-05-17T03:00:00.000Z Updated: 2024-11-29T15:07:40.840Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-ident-se-xss http://www.securityfocus.com/bid/104194 http://www.securitytracker.com/id/1040926	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9198`	not_vulnerable	2026-06-08 05:08:22.939174	Details available A vulnerability in the Active Directory integration component of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a denial of service (DoS) attack. More Information: CSCuw15041. Known Affected Releases: 1.2(1.199). Published: 2016-12-14T00:37:00.000Z Updated: 2024-08-06T02:42:11.259Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ise http://www.securitytracker.com/id/1037415 http://www.securityfocus.com/bid/94810	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-1402`	not_vulnerable	2026-06-08 05:07:28.308718	Details available The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service (authentication outage) via a crafted Password Authentication Protocol (PAP) authentication request, aka Bug ID CSCun25815. Published: 2016-05-21T01:00:00.000Z Updated: 2024-08-05T22:55:14.261Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1035946 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-ise	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0680`	vulnerable	2026-06-08 05:05:13.989961	Details available Cross-site scripting (XSS) vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCui15038. Published: 2014-01-29T16:00:00.000Z Updated: 2024-08-06T09:27:18.648Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/viewAlert.x?alertId=32617 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0680 http://www.securityfocus.com/bid/65227 http://osvdb.org/102588 http://secunia.com/advisories/56672	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5541`	vulnerable	2026-06-08 05:04:52.066378	Details available Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename, aka Bug ID CSCui67495. Published: 2013-10-16T10:00:00.000Z Updated: 2024-09-16T22:09:16.614Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5541	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5540`	vulnerable	2026-06-08 05:04:52.066090	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5539`	vulnerable	2026-06-08 05:04:52.065781	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5538`	vulnerable	2026-06-08 05:04:52.065407	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3445`	vulnerable	2026-06-08 05:04:31.590133	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3420`	vulnerable	2026-06-08 05:04:31.459478	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.