cisco identity services engine passive identity connector

Name: cisco identity services engine passive identity connector
Brand: cisco

productUS

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical3high15medium0low

updated 2026-10-28

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20281US	—OT critical	97.6% (100th)	KEV	no fix	2025-06-25	2 versions
CVE-2026-76460US	critical10.0OT critical	75.6% (100th)	KEV	no fix	2026-09-16	4 versions
CVE-2025-20337US	—OT critical	74.5% (99th)	KEV	no fix	2025-07-16	2 versions
CVE-2025-20282US	—	38.7% (99th)	Exploit	no fix	2025-06-25	= 3.4.0
CVE-2025-20284US	high7.2	25.1% (98th)	—	3.3.0	2025-07-16	3 versions
CVE-2025-20283US	high7.2	13.2% (96th)	—	3.3.0	2025-07-16	3 versions
CVE-2026-20147US	—	10.4% (96th)	—	3.1.0	2026-04-15	5 versions
CVE-2026-20181US	—	8.93% (95th)	—	3.3.0	2026-06-17	4 versions
CVE-2026-20148US	—	6.54% (94th)	—	3.1.0	2026-04-15	5 versions
CVE-2026-76433US	medium5.3	1.27% (70th)	—	3.3.0	2026-09-16	3 versions
CVE-2026-76432US	medium4.9	1.21% (68th)	—	3.3.0	2026-09-16	3 versions
CVE-2026-76431US	medium4.9	1.21% (68th)	—	3.3.0	2026-09-16	3 versions
CVE-2025-20130US	high7.2	0.63% (50th)	—	3.1.0	2025-06-04	4 versions
CVE-2026-20130US	critical10.0	0.54% (45th)	—	3.3.0	2026-09-16	3 versions
CVE-2026-20190US	—	0.50% (43rd)	—	no fix	2026-06-17	2 versions
CVE-2026-20146US	—	0.50% (43rd)	—	3.3.0	2026-07-15	4 versions
CVE-2026-20136US	—	0.50% (43rd)	—	3.3.0	2026-04-15	3 versions
CVE-2026-76428US	medium4.9	0.48% (41st)	—	3.3.0	2026-09-16	3 versions
CVE-2026-76426US	medium4.9	0.48% (41st)	—	3.3.0	2026-09-16	3 versions
CVE-2026-20192US	critical10.0	0.46% (40th)	—	3.3.0	2026-09-16	3 versions
CVE-2025-20285US	medium4.1	0.45% (39th)	—	3.3.0	2025-07-16	3 versions
CVE-2026-76451US	medium4.9	0.43% (37th)	—	3.3.0	2026-09-16	3 versions
CVE-2026-76450US	medium4.9	0.43% (37th)	—	3.3.0	2026-09-16	3 versions
CVE-2026-76449US	medium4.9	0.43% (37th)	—	3.3.0	2026-09-16	3 versions
CVE-2026-76448US	medium4.9	0.43% (37th)	—	3.3.0	2026-09-16	3 versions
CVE-2026-20234US	critical9.9	0.40% (34th)	—	3.3.0	2026-09-16	3 versions
CVE-2026-76439US	medium5.3OT elevated	0.39% (33rd)	—	3.3.0	2026-09-16	3 versions
CVE-2026-76434US	medium4.9	0.38% (32nd)	—	3.3.0	2026-09-16	3 versions
CVE-2026-76447US	medium5.3OT elevated	0.38% (31st)	—	3.3.0	2026-09-16	3 versions
CVE-2026-76446US	medium4.9	0.38% (31st)	—	3.3.0	2026-09-16	3 versions
CVE-2026-76444US	medium5.3OT elevated	0.35% (28th)	—	no fix	2026-09-16	= 3.4.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')8 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')6 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')6 CVEs
CWE-564SQL Injection: Hibernate4 CVEs
CWE-306Missing Authentication for Critical Function3 CVEs
CWE-23Relative Path Traversal2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan