Cisco
Cisco ISE: vulnerabilidades y CVE
Cisco ISE tiene 15 vulnerabilidades publicadas, 13 de ellas en los últimos 12 meses. 7 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE15
Últimos 12 meses13
Críticas7
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-20300 | Alta (7.1) | 0.29% | — | 16 sept 2026 | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must have at least low-privileged… |
| CVE-2026-20284 | Crítica (9.1) | 0.39% | — | 16 sept 2026 | A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient validation of user-supplied input in REST API… |
| CVE-2026-20283 | Media (6.5) | 0.43% | — | 16 sept 2026 | This vulnerability is due to insufficient validation of user-supplied input in IPsec Open API calls. An attacker could exploit this vulnerability by sending crafted input to the IPsec Open API endpoint on an affected… |
| CVE-2026-20282 | Media (4.9) | 0.56% | — | 16 sept 2026 | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of… |
| CVE-2026-20247 | Alta (7.5) | 0.32% | — | 16 sept 2026 | A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker… |
| CVE-2026-20072 | Media (4.9) | 0.37% | — | 16 sept 2026 | — |
| CVE-2026-20071 | Baja (3.8) | 0.15% | — | 16 sept 2026 | This vulnerability is due to insufficient authentication checks that are performed while a user is being onboarded. An attacker could exploit this vulnerability by spoofing the legitimate user and triggering a… |
| CVE-2026-76423 | Crítica (10) | 0.58% | — | 16 sept 2026 | A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service… |
| CVE-2026-20211 | Crítica (9.1) | 0.56% | — | 16 sept 2026 | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have… |
| CVE-2026-20176 | Crítica (9.1) | 0.78% | — | 16 sept 2026 | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have… |
| CVE-2026-20307 | Crítica (9.9) | 0.95% | — | 16 sept 2026 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this… |
| CVE-2026-20306 | Crítica (9.1) | 1.4% | — | 16 sept 2026 | A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit… |
| CVE-2026-20305 | Crítica (9.1) | 1.4% | — | 16 sept 2026 | A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root.… |
| CVE-2025-20332 | Media (4.3) | 0.40% | — | 6 ago 2025 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of… |
| CVE-2025-20331 | Media (5.4) | 0.22% | — | 6 ago 2025 | A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability is… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.