Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior
Críticas / altas1324▼ 116 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior
248 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.83% | — | Cisco Identity Services Engine | 6/11/2020 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface does… | |
| Modificada | Media (6.7) | 0.31% | — | Cisco Identity Services Engine | 6/11/2020 | 17/6/2026 | A vulnerability in the Microsoft Active Directory integration of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to elevate privileges on an affected device. To exploit this vulnerability, an attacker would need to have a valid administrator account on an affected device. The… | |
| Modificada | Media (4.8) | 0.62% | — | Cisco Identity Services Engine | 6/11/2020 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management interface… | |
| Modificada | Media (4.8) | 0.62% | — | Cisco Identity Services Engine | 8/10/2020 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management… | |
| Modificada | Alta (7.7) | 0.88% | — | Cisco Identity Services Engine | 8/10/2020 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. The vulnerability is due to improper enforcement of role-based access control (RBAC) within the web-based management… | |
| Modificada | Media (6.6) | 0.25% | — | Cisco Fmc1000-k9 BiosCisco Fmc1000-k9 FirmwareCisco Fmc2500-k9 BiosCisco Fmc2500-k9 Firmware+18 | 23/9/2020 | 17/6/2026 | A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker to bypass Unified Extensible Firmware Interface (UEFI) Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to improper validation of the… | |
| Modificada | Media (4.8) | 0.62% | — | Cisco Identity Services Engine | 2/7/2020 | 17/6/2026 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation… | |
| Modificada | Media (5.9) | 0.76% | — | Cisco Identity Services Engine | 3/6/2020 | 17/6/2026 | A vulnerability in the syslog processing engine of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a race condition that may occur when syslog messages are processed. An attacker could… | |
| Modificada | Media (5.4) | 0.63% | — | Cisco Identity Services Engine | 4/3/2020 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input to the… | |
| Modificada | Media (6.1) | 1.1% | — | Cisco Identity Services Engine | 19/2/2020 | 17/6/2026 | A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of endpoint data stored in logs used by the web-based interface. An attacker could exploit this… | |
| Modificada | Media (4.8) | 0.62% | — | Cisco Identity Services Engine | 5/2/2020 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected device. The vulnerability is due to insufficient input validation by the web-based management… | |
| Modificada | Media (6.5) | 1.1% | — | Cisco Identity Services Engine | 26/1/2020 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it handles requests. An… | |
| Modificada | Media (5.3) | 1.2% | — | Cisco Identity Services Engine Software | 16/10/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker read tcpdump files generated on an affected device. The vulnerability is due an issue in the authentication logic of the web-based management interface. An attacker… | |
| Modificada | Media (4.8) | 0.62% | — | Cisco Identity Services Engine Software | 16/10/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The attacker must have valid… | |
| Modificada | Media (5.4) | 0.63% | — | Cisco Identity Services Engine | 16/10/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input that… | |
| Modificada | Media (5.4) | 0.63% | — | Cisco Identity Services Engine | 16/10/2019 | 17/6/2026 | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web-based management interface. The vulnerabilities are due to insufficient validation of… | |
| Modificada | Media (6.1) | 1.1% | — | Cisco Identity Services Engine | 2/10/2019 | 17/6/2026 | A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input that is… | |
| Modificada | Media (6.1) | 1.1% | — | Cisco Identity Services Engine | 5/9/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because the… | |
| Modificada | Media (6.5) | 1.2% | — | Cisco Identity Services Engine | 17/7/2019 | 17/6/2026 | A vulnerability in the sponsor portal web interface for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could… | |
| Modificada | Media (6.1) | 1.3% | — | Cisco Identity Services Engine | 17/7/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because the web-based… | |
| Modificada | Media (6.8) | 1.1% | — | Cisco Identity Services Engine | 16/5/2019 | 17/6/2026 | A vulnerability in the External RESTful Services (ERS) API of the Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to generate arbitrary certificates signed by the Internal Certificate Authority (CA) Services on ISE. This vulnerability is due to an incorrect implementation of… | |
| Modificada | Media (5.4) | 0.91% | — | Cisco Identity Services Engine | 18/4/2019 | 17/6/2026 | A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input that is… | |
| Modificada | Alta (7.5) | 2.5% | — | Cisco Identity Services Engine | 17/4/2019 | 17/6/2026 | A vulnerability in the web interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of Secure Sockets Layer (SSL) renegotiation requests. An attacker could… | |
| Modificada | Media (5.4) | 0.83% | — | Cisco Identity Services Engine | 8/2/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some parameters passed to… | |
| Modificada | Alta (7.2) | 1.7% | — | Cisco Identity Services Engine | 23/1/2019 | 17/6/2026 | A vulnerability in the administrative web interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to gain additional privileges on an affected device. The vulnerability is due to improper controls on certain pages in the web interface. An attacker could exploit this… |