Cisco Ise Passive Identity Connector (Cisco) - vulnerabilities (CVEs)

35 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2026-09-16. Vendor: Cisco.

CVEs of Cisco Ise Passive Identity Connector

CVE-2026-76426 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the…
CVE-2026-76431 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote…
CVE-2026-76427 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an…
CVE-2026-76447 - CVSS 5.3 (medium), 2026-09-16: A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to…
CVE-2026-20285 - CVSS 4.3 (medium), 2026-09-16: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow…
CVE-2026-20287 - CVSS 6.5 (medium), 2026-09-16: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity…
CVE-2026-76446 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating…
CVE-2026-76432 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker with administrative-level…
CVE-2026-76448 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
CVE-2026-76434 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated,…
CVE-2026-76444 - CVSS 5.3 (medium), 2026-09-16: A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration…
CVE-2026-76451 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
CVE-2026-76449 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
CVE-2026-76450 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
CVE-2026-76428 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the…
CVE-2026-76433 - CVSS 5.3 (medium), 2026-09-16: A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected…
CVE-2026-76439 - CVSS 5.3 (medium), 2026-09-16: A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote…
CVE-2026-76460 - CVSS 10 (critical), 2026-09-16: A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability…
CVE-2026-20237 - CVSS 9.1 (critical), 2026-09-16: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity…
CVE-2026-76423 - CVSS 10 (critical), 2026-09-16: A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected…
CVE-2026-20130 - CVSS 10 (critical), 2026-09-16: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity…
CVE-2026-20192 - CVSS 10 (critical), 2026-09-16: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity…
CVE-2026-20194 - CVSS 9.1 (critical), 2026-09-16: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity…
CVE-2026-20234 - CVSS 9.9 (critical), 2026-09-16: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity…
CVE-2026-20305 - CVSS 9.1 (critical), 2026-09-16: A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the…
CVE-2026-20306 - CVSS 9.1 (critical), 2026-09-16: A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying…
CVE-2026-20146 - CVSS 5.5 (medium), 2026-07-15: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
CVE-2026-20190 - CVSS 7.5 (high), 2026-06-17: A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This…
CVE-2026-20181 - CVSS 9.1 (critical), 2026-06-17: A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an…
CVE-2026-20148 - CVSS 4.9 (medium), 2026-04-15: A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating…
CVE-2026-20147 - CVSS 9.9 (critical), 2026-04-15: A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…
CVE-2025-20331 - CVSS 5.4 (medium), 2025-08-06: A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS…
CVE-2025-20337 - CVSS 10 (critical), 2025-07-16: A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying…
CVE-2025-20125 - CVSS 9.1 (critical), 2025-02-05: A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change…
CVE-2025-20124 - CVSS 9.9 (critical), 2025-02-05: A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device.…