Cisco Identity Services Engine Vulnerabilità

Sequenza temporale

L'anno scorso

Versione

1.09
3.2.06
1.16
2.7.05
3.0.05

Contromisure

Official Fix108
Temporary Fix0
Workaround2
Unavailable0
Not Defined49

Sfruttabilità

High4
Functional0
Proof-of-Concept0
Unproven2
Not Defined153

Accesso al vettore

Not Defined0
Physical0
Local17
Adjacent2
Network140

Autenticazione

Not Defined0
High30
Low64
None65

Interazione dell'utente

Not Defined0
Required45
None114

C3BM Index

L'anno scorso

CVSSv3 Base

≤10
≤20
≤31
≤412
≤539
≤660
≤731
≤811
≤93
≤102

CVSSv3 Temp

≤10
≤20
≤31
≤415
≤541
≤661
≤727
≤810
≤92
≤102

VulDB

≤10
≤20
≤38
≤419
≤547
≤638
≤732
≤811
≤92
≤102

NVD

≤10
≤20
≤30
≤41
≤516
≤612
≤733
≤814
≤98
≤102

CNA

≤10
≤20
≤30
≤41
≤518
≤619
≤723
≤83
≤93
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k0
<2k0
<5k18
<10k83
<25k54
<50k4
<100k0
≥100k0

Exploiter aujourd'hui

<1k87
<2k19
<5k34
<10k16
<25k3
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

L'anno scorso

🔴 CTI Attività

Affected Versions (89): 1, 1.0, 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1(4.1), 1.1.1, 1.1.2, 1.2, 1.2(0.793), 1.2(0.899), 1.2(1.198), 1.2(1.901), 1.2.0 Patch 16, 1.2.1 Patch 7, 1.3, 1.3 Patch 4, 1.3(0.320), 1.3(0.722), 1.3(0.876), 1.3(0.909), 1.3(106.146), 1.3(120.135), 1.4, 1.4 Patch 3, 1.4(0.109), 1.4(0.908), 2, 2.0, 2.0(0.147), 2.0(0.169), 2.0.1, 2.1, 2.1(0.474), 2.1(0.800), 2.1(102.101), 2.2, 2.2(0.283), 2.3, 2.3(0.151), 2.4, 2.5, 2.6, 2.6.0 p1, 2.6.0 p2, 2.6.0 p3, 2.6.0 p5, 2.6.0 p6, 2.6.0 p7, 2.6.0 p8, 2.6.0 p9, 2.6.0 p11, 2.6.0 p12, 2.7, 2.7 Patch 7, 2.7.0 p1, 2.7.0 p2, 2.7.0 p3, 2.7.0 p4, 2.7.0 p5, 2.7.0 p6, 2.7.0 p7, 2.7.0 p9, 3, 3.0, 3.0 Patch 5, 3.0.0 p1, 3.0.0 p2, 3.0.0 p3, 3.0.0 p4, 3.0.0 p5, 3.0.0 p6, 3.0.0 p7, 3.0P7, 3.1, 3.1 Patch 3, 3.1.0 p1, 3.1.0 p3, 3.1.0 p4, 3.1.0 p5, 3.1.0 p6, 3.1.0 p7, 3.1P4, 3.1P5, 3.2, 3.2.0 p1, 3.2.0 p2, 3.3

Link to Product Website: https://www.cisco.com/

Tipo di software: Policy Management Software

Data di pubblicazioneBaseTempVulnerabilità0dayOggiSfrConCTICVE
03/04/20245.45.3Cisco Identity Services Engine Software Web-based Management Interface cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-20368
03/04/20245.15.0Cisco Identity Services Engine Software Web-based Management Interface escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.07CVE-2024-20332
10/01/20244.24.2Cisco Identity Services Engine Web-based Management Interface cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-20251
15/11/20233.63.5Cisco Identity Services Engine Web-based Management Interface cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-20208
15/11/20236.76.7Cisco Identity Services Engine Web Interface escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20272
01/11/20238.18.0Cisco Identity Services Engine Software CLI escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-20175
01/11/20235.15.0Cisco Identity Services Engine Software CLI escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-20170
01/11/20234.34.2Cisco Identity Services Engine Software CDP denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20213
01/11/20235.55.5Cisco Identity Services Engine Software escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-20195
01/11/20235.55.5Cisco Identity Services Engine Software escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-20196
07/09/20233.83.7Cisco Identity Services Engine ERS API rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-20194
07/09/20236.56.4Cisco Identity Services Engine escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20193
07/09/20236.96.8Cisco Identity Services Engine RADIUS Message autenticazione debole$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20243
16/08/20235.45.3Cisco Identity Services Engine rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20111
18/05/20234.84.8Cisco Identity Services Engine Web-based Management Interface XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20174
18/05/20234.84.8Cisco Identity Services Engine Web-based Management Interface XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-20173
18/05/20235.95.7Cisco Identity Services Engine Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20172
18/05/20235.95.7Cisco Identity Services Engine Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20171
18/05/20235.25.1Cisco Identity Services Engine Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20106
18/05/20234.74.7Cisco Identity Services Engine Web-based Management Interface rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20087
18/05/20234.74.7Cisco Identity Services Engine Web-based Management Interface rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20077
18/05/20235.05.0Cisco Identity Services Engine Local Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20167
18/05/20235.65.6Cisco Identity Services Engine Local Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20166
18/05/20237.06.9Cisco Identity Services Engine escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20164
18/05/20237.06.9Cisco Identity Services Engine escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20163

134 non vengono visualizzate più voci

altre voci di Cisco

Do you need the next level of professionalism?

Upgrade your account now!