9.1
Critique
CVE-2026-20194 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine…
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20194 are related to incorrect resource transfer between spheres that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-669.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Identity Services Engine Software | 3.5.0 | Pas de correctif indiqué |
| Cisco Identity Services Engine Software | 3.4.0 | Pas de correctif indiqué |
| Cisco Identity Services Engine Software | 3.3.0 | Pas de correctif indiqué |
| Cisco Identity Services Engine Software | 3.2.0 | Pas de correctif indiqué |
| Cisco Identity Services Engine Software | 3.1.0 | Pas de correctif indiqué |
| Cisco ISE Passive Identity Connector | 3.5.0 | Pas de correctif indiqué |
| Cisco ISE Passive Identity Connector | 3.4.0 | Pas de correctif indiqué |
| Cisco ISE Passive Identity Connector | 3.3.0 | Pas de correctif indiqué |
| Cisco ISE Passive Identity Connector | 3.2.0 | Pas de correctif indiqué |
Afficher l’autre branche Masquer l’autre branche
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco ISE Passive Identity Connector | 3.1.0 | Pas de correctif indiqué |
Références
- cisco-sa-hardening-ise-XU5EwX5T sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Identity Services Engine Software
Les 199 CVE de Cisco Identity Services Engine Software →
CVE-2026-20241
Cisco Identity Services Engine Authorization Bypass Vulnerability
5.3
Moyenne
CVE-2026-76426
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to…
4.9
Moyenne
CVE-2026-76431
A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC…
4.9
Moyenne
CVE-2026-76427
A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to…
4.9
Moyenne