6.0
Moyenne
CVE-2023-20167 Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path…
Description
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Identity Services Engine Software | Versions non publiées |
Références
- 20230517 Cisco Identity Services Engine Path Traversal Vulnerabilities sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Identity Services Engine Software
Les 199 CVE de Cisco Identity Services Engine Software →
CVE-2026-20241
Cisco Identity Services Engine Authorization Bypass Vulnerability
5.3
Moyenne
CVE-2026-76426
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to…
4.9
Moyenne
CVE-2026-76431
A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC…
4.9
Moyenne
CVE-2026-76427
A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to…
4.9
Moyenne