Identity Services Engine Passive Identity Connector (Cisco) - vulnerabilities (CVEs)

31 CVEs, 0 in the last 30 days, 61 known versions, newest CVE from 2026-09-16. Vendor: Cisco.

CVEs of Identity Services Engine Passive Identity Connector

• CVE-2026-76426 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the…
• CVE-2026-76431 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote…
• CVE-2026-76447 - CVSS 5.3 (medium), 2026-09-16: A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to…
• CVE-2026-76446 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating…
• CVE-2026-76432 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker with administrative-level…
• CVE-2026-76448 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
• CVE-2026-76434 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated,…
• CVE-2026-76444 - CVSS 5.3 (medium), 2026-09-16: A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration…
• CVE-2026-76451 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
• CVE-2026-76449 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
• CVE-2026-76450 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
• CVE-2026-76428 - CVSS 4.9 (medium), 2026-09-16: A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the…
• CVE-2026-76433 - CVSS 5.3 (medium), 2026-09-16: A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected…
• CVE-2026-76439 - CVSS 5.3 (medium), 2026-09-16: A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote…
• CVE-2026-76460 - CVSS 10 (critical), 2026-09-16: A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability…
• CVE-2026-20130 - CVSS 10 (critical), 2026-09-16: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity…
• CVE-2026-20192 - CVSS 10 (critical), 2026-09-16: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity…
• CVE-2026-20234 - CVSS 9.9 (critical), 2026-09-16: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity…
• CVE-2026-20146 - CVSS 5.5 (medium), 2026-07-15: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
• CVE-2026-20190 - CVSS 7.5 (high), 2026-06-17: A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This…
• CVE-2026-20181 - CVSS 9.1 (critical), 2026-06-17: A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an…
• CVE-2026-20148 - CVSS 4.9 (medium), 2026-04-15: A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating…
• CVE-2026-20147 - CVSS 9.9 (critical), 2026-04-15: A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…
• CVE-2026-20136 - CVSS 6 (medium), 2026-04-15: A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local…
• CVE-2025-20285 - CVSS 4.1 (medium), 2025-07-16: A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured IP…
• CVE-2025-20284 - CVSS 7.2 (high), 2025-07-16: A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying…
• CVE-2025-20337 - CVSS 10 (critical), 2025-07-16: A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying…
• CVE-2025-20283 - CVSS 7.2 (high), 2025-07-16: A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying…
• CVE-2025-20282 - CVSS 10 (critical), 2025-06-25: A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected…
• CVE-2025-20281 - CVSS 10 (critical), 2025-06-25: A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying…
• CVE-2025-20130 - CVSS 7.2 (high), 2025-06-04: A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote…