Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2687▼ 562 respecto a la semana anterior
Críticas / altas1259▼ 239 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)265▼ 239 respecto a la semana anterior
248 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 1.1% | — | Cisco Identity Services Engine | 23/1/2019 | 17/6/2026 | A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of requests stored in the system's logging database. An attacker could exploit this vulnerability by… | |
| Modificada | Media (6.5) | 1.5% | — | Cisco Identity Services Engine | 23/1/2019 | 17/6/2026 | A vulnerability in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain confidential information for privileged accounts. The vulnerability is due to the improper handling of confidential information. An attacker could exploit this vulnerability by logging… | |
| Modificada | Media (6.1) | 1.2% | — | Cisco Identity Services Engine Software | 15/1/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some parameters… | |
| Modificada | Media (6.1) | 1.3% | — | Cisco Identity Services Engine Software | 15/1/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient sanitization of… | |
| Modificada | Media (4.9) | 1.3% | — | Cisco Identity Services Engine | 10/1/2019 | 17/6/2026 | A vulnerability in the Admin Portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view saved passwords in plain text. The vulnerability is due to the incorrect inclusion of saved passwords when loading configuration pages in the Admin Portal. An attacker with read or write… | |
| Modificada | Media (4.7) | 1.6% | — | Cisco Identity Services Engine | 5/10/2018 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server. | |
| Modificada | Media (4.7) | 1.4% | — | Cisco Identity Services Engine | 5/10/2018 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server. | |
| Modificada | Alta (8.8) | 1.2% | — | Cisco Identity Services Engine Software | 1/8/2018 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the… | |
| Modificada | Media (6.1) | 1.8% | — | Cisco Identity Services Engine Software | 7/6/2018 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some parameters passed to… | |
| Modificada | Media (6.1) | 1.7% | — | Cisco Identity Services Engine Software | 17/5/2018 | 17/6/2026 | A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are… | |
| Modificada | Media (6.1) | 1.7% | — | Cisco Identity Services Engine Software | 17/5/2018 | 17/6/2026 | A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of requests stored in logs in the application management interface. An attacker could exploit this… | |
| Modificada | Alta (8.6) | 2.4% | — | Cisco Identity Services Engine | 17/5/2018 | 17/6/2026 | A vulnerability in the Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) certificate validation during EAP authentication for the Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the ISE application server to restart unexpectedly, causing a denial of… | |
| Modificada | Media (6.7) | 0.33% | — | Cisco Identity Services Engine | 19/4/2018 | 17/6/2026 | A vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to access the device's shell. The vulnerability is due to improper configuration of the support tunnel feature. An attacker could exploit this vulnerability by tricking the device into… | |
| Modificada | Media (6.7) | 0.82% | — | Cisco Identity Services Engine | 8/3/2018 | 17/6/2026 | A vulnerability in specific CLI commands for the Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid administrator credentials for the device. The… | |
| Modificada | Media (5.4) | 0.83% | — | Cisco Identity Services Engine | 8/3/2018 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the… | |
| Modificada | Media (6.3) | 0.84% | — | Cisco Identity Services Engine | 8/3/2018 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections on the… | |
| Modificada | Media (5.3) | 1.0% | — | Cisco Identity Services Engine | 8/3/2018 | 17/6/2026 | A vulnerability in certain CLI commands of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with the privileges of the local user, aka Command Injection. These commands should have been restricted from this user. The… | |
| Modificada | Alta (8.8) | 2.5% | — | Cisco Identity Services Engine | 8/3/2018 | 17/6/2026 | A vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation. An attacker could exploit this vulnerability by authenticating to the device and… | |
| Modificada | Media (6.1) | 1.7% | — | Cisco Identity Services Engine | 8/3/2018 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of… | |
| Modificada | Media (4.4) | 0.38% | — | Cisco Identity Services Engine | 8/3/2018 | 17/6/2026 | A vulnerability in specific CLI commands for the Cisco Identity Services Engine could allow an authenticated, local attacker to cause a denial of service (DoS) condition. The device may need to be manually rebooted to recover. The vulnerability is due to lack of proper input validation of the CLI user input for… | |
| Modificada | Media (6.1) | 1.2% | — | Cisco Identity Services Engine | 18/1/2018 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a Document Object Model (DOM) cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due… | |
| Modificada | Alta (7.5) | 2.0% | — | Cisco Identity Services Engine Software | 16/11/2017 | 17/6/2026 | A vulnerability in the Guest Portal login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform multiple login attempts in excess of the configured login attempt limit. The vulnerability is due to insufficient server-side login attempt limit enforcement. An attacker… | |
| Modificada | Alta (7.8) | 0.32% | — | Cisco Identity Services EngineCisco Identity Services Engine ExpressCisco Identity Services Engine Virtual Appliance | 2/11/2017 | 17/6/2026 | A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI commands with elevated privileges. The vulnerability is due to incomplete input validation of the user input for CLI commands issued at the… | |
| Modificada | Crítica (9.8) | 5.5% | — | Cisco Identity Services Engine | 7/8/2017 | 17/6/2026 | A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass local authentication. The vulnerability is due to improper handling of authentication requests and policy assignment for externally authenticated users. An attacker could… | |
| Modificada | Media (5.4) | 0.89% | — | Cisco Identity Services Engine | 10/7/2017 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected device, related to the Guest Portal. More Information: CSCvd74794. Known… |