Description
The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-ise
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034666
Scores
CVSS v3
9.8
EPSS
0.0302
EPSS Percentile
86.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (19)
cisco/identity_services_engine_software
1.1.1 (7 CPE variants)
cisco/identity_services_engine_software
1.1.2 (10 CPE variants)
cisco/identity_services_engine_software
1.1.3 (8 CPE variants)
cisco/identity_services_engine_software
1.1.4 (8 CPE variants)
cisco/identity_services_engine_software
1.1_base
cisco/identity_services_engine_software
1.2\(0.747\)
cisco/identity_services_engine_software
1.2\(0.793\)
cisco/identity_services_engine_software
1.2\(1.198\)
cisco/identity_services_engine_software
1.2\(1.901\)
cisco/identity_services_engine_software
1.2.0.899 p14
... and 9 more
Published
Jan 15, 2016
Tracked Since
Feb 18, 2026