Skip to content
fr Sign in
4.9 Medium

CVE-2023-20173 Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an…

Description

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery (SSRF) attack through an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products and versions

Product Affected versions Fixed in
Cisco Identity Services Engine Software Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Identity Services Engine Software

The 199 CVEs of Cisco Identity Services Engine Software →
CVE-2026-20241 Cisco Identity Services Engine Authorization Bypass Vulnerability 5.3 Medium CVE-2026-76426 A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to… 4.9 Medium CVE-2026-76431 A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC… 4.9 Medium CVE-2026-76427 A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to… 4.9 Medium
Track this CVE