DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Cisco Identity Services Engine (ISE): Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-04-15
Ein Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, und um Informationen offenzulegen.
01
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-20186US | — | — | ||
A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affecte… | ||||
| CVE-2026-20180US | — | Exploit | ||
A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affecte… | ||||
| CVE-2026-20148US | — | — | ||
A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system and read arbitrary… | ||||
| CVE-2026-20147US | — | — | ||
A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.… | ||||
| CVE-2026-20136US | — | — | ||
A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with adminis… | ||||
| CVE-2026-20132US | — | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative write… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Security Advisory cisco-sa-ise-cmd-inj-5WSJcYJB vom 2026-04-15external
- Cisco Security Advisory cisco-sa-ise-rce-4fverepv vom 2026-04-15external
- Cisco Security Advisory cisco-sa-ise-rce-traversal-8bYndVrZ vom 2026-04-15external
- Cisco Security Advisory cisco-sa-isexss-BS8ctE7U vom 2026-04-15external
- WID-SEC-W-2026-1146 - CSAF Versionself
- WID-SEC-2026-1146 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan