Cisco Cisco ISE Passive Identity Connector

Name: Cisco Cisco ISE Passive Identity Connector
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

13critical4high6medium0low

updated 2026-10-27

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-76460US	critical10.0OT critical	75.6% (100th)	KEV	no fix	2026-09-16	≤ vers:unknown/*
CVE-2025-20337US	—OT critical	74.5% (99th)	KEV	no fix	2025-07-16	5 versions
CVE-2025-20124US	high7.2	18.5% (97th)	Exploit	no fix	2025-02-05	5 versions
CVE-2025-20125US	high7.2OT high	16.4% (97th)	Exploit	no fix	2025-02-05	5 versions
CVE-2026-20147US	—	10.4% (96th)	—	no fix	2026-04-15	4 versions
CVE-2026-20181US	—	8.93% (95th)	—	no fix	2026-06-17	6 versions
CVE-2026-20148US	—	6.54% (94th)	—	no fix	2026-04-15	4 versions
CVE-2026-20306US	critical9.1	1.55% (75th)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-20305US	critical9.1	1.55% (75th)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-20307US	critical9.9	0.98% (62nd)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-76424US	high7.2	0.92% (60th)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-20211US	critical9.1	0.84% (58th)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-20176US	critical9.1	0.80% (56th)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-20283US	medium6.5	0.64% (50th)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-20282US	medium4.9	0.60% (48th)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-76423US	critical10.0	0.58% (48th)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-20130US	critical10.0	0.54% (45th)	—	no fix	2026-09-16	2 versions
CVE-2026-20284US	critical9.1	0.53% (45th)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-20190US	—	0.50% (43rd)	—	no fix	2026-06-17	2 versions
CVE-2026-20146US	—	0.50% (42nd)	—	no fix	2026-07-15	5 versions
CVE-2026-20237US	critical9.1	0.48% (41st)	—	no fix	2026-09-16	2 versions
CVE-2026-20194US	critical9.1	0.48% (41st)	—	no fix	2026-09-16	2 versions
CVE-2026-76428US	medium4.9	0.48% (41st)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-76426US	medium4.9	0.48% (41st)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-20192US	critical10.0	0.46% (40th)	—	no fix	2026-09-16	2 versions
CVE-2026-76427US	medium4.9	0.46% (40th)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-76425US	high7.6	0.41% (35th)	—	no fix	2026-09-16	≤ vers:unknown/*
CVE-2026-20234US	critical9.9	0.40% (34th)	—	no fix	2026-09-16	2 versions
CVE-2026-20287US	medium6.5	0.37% (31st)	—	no fix	2026-09-16	2 versions
CVE-2025-20331US	—	0.22% (13th)	—	no fix	2025-08-06	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-23Relative Path Traversal6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-502Deserialization of Untrusted Data4 CVEs
CWE-285Improper Authorization3 CVEs
CWE-641Improper Restriction of Names for Files and Other Resources3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs

sources (3)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)23 CVEs
USCisco PSIRT (CSAF)10 CVEs
EUEU Vulnerability Database (ENISA)9 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan