cisco identity services engine

Name: cisco identity services engine
Brand: cisco

productUS

cpe:2.3:h:cisco:identity_services_engine:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high8medium1low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-3445US	medium5.0	2.58% (85th)	—	no fix	2013-07-29	—
CVE-2011-3290US	high10.0	2.28% (83rd)	—	no fix	2011-09-21	—
CVE-2014-0680US	medium4.3	1.95% (80th)	—	no fix	2014-01-29	—
CVE-2013-5538US	medium5.0	1.19% (68th)	—	no fix	2013-10-16	—
CVE-2013-5540US	medium6.8	1.06% (64th)	—	no fix	2013-10-16	—
CVE-2013-5539US	medium6.0	0.96% (61st)	—	no fix	2013-10-16	—
CVE-2013-5541US	low3.5	0.77% (55th)	—	no fix	2013-10-16	—
CVE-2012-3908US	medium6.8	0.64% (51st)	—	no fix	2012-09-16	= 3300
CVE-2013-3420US	medium6.8	0.58% (47th)	—	no fix	2013-07-18	—
CVE-2018-0275US	medium6.7	0.33% (26th)	—	2.2\(0.470\)	2018-04-19	< 2.2\(0.470\)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2642 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-16CWE-161 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-255CWE-2551 CVEs
CWE-399CWE-3991 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.