Cisco Identity Services Engine Software
Cisco- Product type
- Other
- Catalog vulnerabilities
- 156
en
Severity across 100 analyzed records
Verify to analyze this security profile
As of 09/13/2026, within CyStack's analyzed data, Cisco Identity Services Engine Software has 3 security vulnerabilities published in the last 90 days. Of these, 2 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Cisco Identity Services Engine Software and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-20146Cisco Identity Services Engine Path Traversal Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/15/2026 | SeverityMedium |
CVE-2026-20190Cisco Identity Services Engine Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/17/2026 | SeverityHigh |
CVE-2026-20181Cisco Identity Services Engine Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/17/2026 | SeverityCritical |
CVE-2026-20193Cisco Identity Services Engine Authentication Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/06/2026 | SeverityMedium |
CVE-2026-20195Cisco Identity Services Engine Observable Response Discrepancy Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/06/2026 | SeverityMedium |
CVE-2026-20136Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2026 | SeverityMedium |
CVE-2026-20180Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2026 | SeverityCritical |
CVE-2026-20186Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2026 | SeverityCritical |
CVE-2026-20148Cisco Identity Services Engine Path Traversal Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2026 | SeverityMedium |
CVE-2026-20147Cisco Identity Services Engine Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2026 | SeverityCritical |
CVE-2026-20132Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2026 | SeverityMedium |
CVE-2026-20047Cisco Identity Services Engine Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published01/15/2026 | SeverityMedium |
CVE-2026-20076Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published01/15/2026 | SeverityMedium |
CVE-2026-20029Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published01/07/2026 | SeverityMedium |
CVE-2025-20304 | Exploitation statusNot known exploited | FixNot confirmed | Published11/05/2025 | SeverityMedium |
CVE-2025-20305 | Exploitation statusNot known exploited | FixNot confirmed | Published11/05/2025 | SeverityMedium |
CVE-2025-20289 | Exploitation statusNot known exploited | FixNot confirmed | Published11/05/2025 | SeverityMedium |
CVE-2025-20303 | Exploitation statusNot known exploited | FixNot confirmed | Published11/05/2025 | SeverityMedium |
CVE-2025-20343Cisco Identity Services Engine Radius Suppression Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/05/2025 | SeverityHigh |
CVE-2025-20131Cisco Identity Services Engine Arbitrary File Upload Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published08/20/2025 | SeverityMedium |
CVE-2025-20332Cisco Identity Services Engine Authorization Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published08/06/2025 | SeverityMedium |
CVE-2025-20331Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy | Exploitation statusNot known exploited | FixNot confirmed | Published08/06/2025 | SeverityMedium |
CVE-2025-20337Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | Exploitation statusKEV | FixNot confirmed | Published07/16/2025 | SeverityCritical |
CVE-2025-20285Cisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/16/2025 | SeverityMedium |
CVE-2025-20284Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/16/2025 | SeverityMedium |
CVE-2025-20283Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published07/16/2025 | SeverityMedium |
CVE-2025-20282Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/25/2025 | SeverityCritical |
CVE-2025-20281Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | Exploitation statusKEV | FixNot confirmed | Published06/25/2025 | SeverityCritical |
CVE-2025-20264Cisco Identity Services Engine Authorization Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/25/2025 | SeverityMedium |
CVE-2025-20286ISE on AWS Static Credential | Exploitation statusNot known exploited | FixNot confirmed | Published06/04/2025 | SeverityCritical |
CVE-2025-20130Cisco Identity Services Engine Access Control Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/04/2025 | SeverityMedium |
CVE-2025-20267Cisco Identity Services Stored Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/21/2025 | SeverityMedium |
CVE-2025-20152ISE restart | Exploitation statusNot known exploited | FixNot confirmed | Published05/21/2025 | SeverityHigh |
CVE-2025-20205 | Exploitation statusNot known exploited | FixNot confirmed | Published02/05/2025 | SeverityMedium |
CVE-2025-20204 | Exploitation statusNot known exploited | FixNot confirmed | Published02/05/2025 | SeverityMedium |
CVE-2025-20125Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/05/2025 | SeverityCritical |
CVE-2025-20124Cisco Identity Services Engine Java Deserialization Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/05/2025 | SeverityCritical |
CVE-2020-3525Cisco Identity Services Engine Password Disclosure to an Unauthorized Actor Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2024-20539Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20538Cisco Identity Services Engine Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20537Cisco Identity Services Engine Authorization Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20532Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20531Cisco Identity Services Engine XML External Entity Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20530Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20529Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20528Cisco Identity Services Engine Path Traversal Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityLow |
CVE-2024-20527Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20525Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20487Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20476Cisco Identity Services Engine Authorization Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2024 | SeverityMedium |
CVE-2024-20515Cisco Identity Services Engine Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published10/02/2024 | SeverityMedium |
CVE-2024-20469Cisco Identity Services Engine Command Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/04/2024 | SeverityMedium |
CVE-2024-20417Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabities | Exploitation statusNot known exploited | FixNot confirmed | Published08/21/2024 | SeverityMedium |
CVE-2024-20466Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published08/21/2024 | SeverityMedium |
CVE-2024-20486Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published08/21/2024 | SeverityMedium |
CVE-2024-20479 | Exploitation statusNot known exploited | FixNot confirmed | Published08/07/2024 | SeverityMedium |
CVE-2024-20443 | Exploitation statusNot known exploited | FixNot confirmed | Published08/07/2024 | SeverityMedium |
CVE-2024-20296 | Exploitation statusNot known exploited | FixNot confirmed | Published07/17/2024 | SeverityMedium |
CVE-2024-20368 | Exploitation statusNot known exploited | FixNot confirmed | Published04/03/2024 | SeverityMedium |
CVE-2024-20332 | Exploitation statusNot known exploited | FixNot confirmed | Published04/03/2024 | SeverityMedium |
CVE-2024-20251 | Exploitation statusNot known exploited | FixNot confirmed | Published01/17/2024 | SeverityMedium |
CVE-2023-20272 | Exploitation statusNot confirmed | FixNot confirmed | Published11/21/2023 | SeverityMedium |
CVE-2023-20208 | Exploitation statusNot confirmed | FixNot confirmed | Published11/21/2023 | SeverityMedium |
CVE-2023-20175 | Exploitation statusNot known exploited | FixNot confirmed | Published11/01/2023 | SeverityHigh |
CVE-2023-20170 | Exploitation statusNot known exploited | FixNot confirmed | Published11/01/2023 | SeverityMedium |
CVE-2023-20196 | Exploitation statusNot confirmed | FixNot confirmed | Published11/01/2023 | SeverityMedium |
CVE-2023-20195 | Exploitation statusNot confirmed | FixNot confirmed | Published11/01/2023 | SeverityMedium |
CVE-2023-20213 | Exploitation statusNot known exploited | FixNot confirmed | Published11/01/2023 | SeverityMedium |
CVE-2023-20194 | Exploitation statusNot known exploited | FixNot confirmed | Published09/07/2023 | SeverityMedium |
CVE-2023-20193 | Exploitation statusNot known exploited | FixNot confirmed | Published09/07/2023 | SeverityMedium |
CVE-2023-20243 | Exploitation statusNot confirmed | FixNot confirmed | Published09/06/2023 | SeverityHigh |
CVE-2023-20111 | Exploitation statusNot confirmed | FixNot confirmed | Published08/16/2023 | SeverityMedium |
CVE-2023-20228 | Exploitation statusNot confirmed | FixNot confirmed | Published08/16/2023 | SeverityMedium |
CVE-2023-20167Cisco Identity Services Engine Path Traversal Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/18/2023 | SeverityMedium |
CVE-2023-20173Cisco Identity Services Engine XML External Entity Injection Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/18/2023 | SeverityMedium |
CVE-2023-20172Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/18/2023 | SeverityMedium |
CVE-2023-20174Cisco Identity Services Engine XML External Entity Injection Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/18/2023 | SeverityMedium |
CVE-2023-20171Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/18/2023 | SeverityMedium |
CVE-2023-20087Cisco Identity Services Engine Arbitrary File Download Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/18/2023 | SeverityMedium |
CVE-2023-20163Cisco Identity Services Engine Command Injection Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/18/2023 | SeverityMedium |
CVE-2023-20166Cisco Identity Services Engine Path Traversal Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/18/2023 | SeverityMedium |
CVE-2023-20164Cisco Identity Services Engine Command Injection Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/18/2023 | SeverityMedium |
CVE-2023-20077Cisco Identity Services Engine Arbitrary File Download Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/18/2023 | SeverityMedium |
CVE-2023-20106Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published05/18/2023 | SeverityMedium |
CVE-2023-20152Cisco Identity Services Engine Command Injection Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/05/2023 | SeverityMedium |
CVE-2023-20030Cisco Identity Services Engine XML External Entity Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/05/2023 | SeverityMedium |
CVE-2023-20022Cisco Identity Services Engine Privilege Escalation Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/05/2023 | SeverityMedium |
CVE-2023-20122Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/05/2023 | SeverityMedium |
CVE-2023-20153Cisco Identity Services Engine Command Injection Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/05/2023 | SeverityMedium |
CVE-2023-20023Cisco Identity Services Engine Privilege Escalation Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/05/2023 | SeverityMedium |
CVE-2023-20021Cisco Identity Services Engine Privilege Escalation Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/05/2023 | SeverityMedium |
CVE-2023-20121Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published04/05/2023 | SeverityMedium |
CVE-2023-20085 | Exploitation statusNot confirmed | FixNot confirmed | Published02/16/2023 | SeverityMedium |
CVE-2022-20967 | Exploitation statusNot confirmed | FixNot confirmed | Published01/18/2023 | SeverityMedium |
CVE-2022-20964 | Exploitation statusPublic exploit | FixNot confirmed | Published01/18/2023 | SeverityMedium |
CVE-2022-20966 | Exploitation statusNot confirmed | FixNot confirmed | Published01/18/2023 | SeverityMedium |
CVE-2022-20965 | Exploitation statusNot confirmed | FixNot confirmed | Published01/18/2023 | SeverityMedium |
CVE-2022-20962 | Exploitation statusNot confirmed | FixNot confirmed | Published11/03/2022 | SeverityLow |
CVE-2022-20963 | Exploitation statusNot known exploited | FixNot confirmed | Published11/03/2022 | SeverityMedium |
CVE-2022-20937 | Exploitation statusNot confirmed | FixNot confirmed | Published11/03/2022 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan