Cisco Identity Services Engine 漏洞

时间轴

去年

版本

1.09
3.2.06
1.16
2.7.05
3.0.05

修正

Official Fix108
Temporary Fix0
Workaround2
Unavailable0
Not Defined49

易受攻击性

High4
Functional0
Proof-of-Concept0
Unproven2
Not Defined153

访问向量

Not Defined0
Physical0
Local17
Adjacent2
Network140

身份验证

Not Defined0
High30
Low64
None65

用户交互

Not Defined0
Required45
None114

C3BM Index

去年

CVSSv3 Base

≤10
≤20
≤31
≤412
≤539
≤660
≤731
≤811
≤93
≤102

CVSSv3 Temp

≤10
≤20
≤31
≤415
≤541
≤661
≤727
≤810
≤92
≤102

VulDB

≤10
≤20
≤38
≤419
≤547
≤638
≤732
≤811
≤92
≤102

NVD

≤10
≤20
≤30
≤41
≤516
≤612
≤733
≤814
≤98
≤102

CNA

≤10
≤20
≤30
≤41
≤518
≤619
≤723
≤83
≤93
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k18
<10k83
<25k54
<50k4
<100k0
≥100k0

本日攻击

<1k93
<2k16
<5k32
<10k16
<25k2
<50k0
<100k0
≥100k0

攻击市场容量

去年

🔴 CTI 活动

Affected Versions (89): 1, 1.0, 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1(4.1), 1.1.1, 1.1.2, 1.2, 1.2(0.793), 1.2(0.899), 1.2(1.198), 1.2(1.901), 1.2.0 Patch 16, 1.2.1 Patch 7, 1.3, 1.3 Patch 4, 1.3(0.320), 1.3(0.722), 1.3(0.876), 1.3(0.909), 1.3(106.146), 1.3(120.135), 1.4, 1.4 Patch 3, 1.4(0.109), 1.4(0.908), 2, 2.0, 2.0(0.147), 2.0(0.169), 2.0.1, 2.1, 2.1(0.474), 2.1(0.800), 2.1(102.101), 2.2, 2.2(0.283), 2.3, 2.3(0.151), 2.4, 2.5, 2.6, 2.6.0 p1, 2.6.0 p2, 2.6.0 p3, 2.6.0 p5, 2.6.0 p6, 2.6.0 p7, 2.6.0 p8, 2.6.0 p9, 2.6.0 p11, 2.6.0 p12, 2.7, 2.7 Patch 7, 2.7.0 p1, 2.7.0 p2, 2.7.0 p3, 2.7.0 p4, 2.7.0 p5, 2.7.0 p6, 2.7.0 p7, 2.7.0 p9, 3, 3.0, 3.0 Patch 5, 3.0.0 p1, 3.0.0 p2, 3.0.0 p3, 3.0.0 p4, 3.0.0 p5, 3.0.0 p6, 3.0.0 p7, 3.0P7, 3.1, 3.1 Patch 3, 3.1.0 p1, 3.1.0 p3, 3.1.0 p4, 3.1.0 p5, 3.1.0 p6, 3.1.0 p7, 3.1P4, 3.1P5, 3.2, 3.2.0 p1, 3.2.0 p2, 3.3

Link to Product Website: https://www.cisco.com/

软件类型: Policy Management Software

已发布BaseTemp漏洞0day今天修正CTICVE
2024-04-035.45.3Cisco Identity Services Engine Software Web-based Management Interface 跨网站请求伪造$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-20368
2024-04-035.15.0Cisco Identity Services Engine Software Web-based Management Interface 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.07CVE-2024-20332
2024-01-104.24.2Cisco Identity Services Engine Web-based Management Interface 跨网站脚本$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-20251
2023-11-153.63.5Cisco Identity Services Engine Web-based Management Interface 跨网站脚本$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-20208
2023-11-156.76.7Cisco Identity Services Engine Web Interface 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20272
2023-11-018.18.0Cisco Identity Services Engine Software CLI 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-20175
2023-11-015.15.0Cisco Identity Services Engine Software CLI 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-20170
2023-11-014.34.2Cisco Identity Services Engine Software CDP 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20213
2023-11-015.55.5Cisco Identity Services Engine Software 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-20195
2023-11-015.55.5Cisco Identity Services Engine Software 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-20196
2023-09-073.83.7Cisco Identity Services Engine ERS API 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-20194
2023-09-076.56.4Cisco Identity Services Engine 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20193
2023-09-076.96.8Cisco Identity Services Engine RADIUS Message 弱身份验证$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20243
2023-08-165.45.3Cisco Identity Services Engine 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20111
2023-05-184.84.8Cisco Identity Services Engine Web-based Management Interface XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20174
2023-05-184.84.8Cisco Identity Services Engine Web-based Management Interface XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-20173
2023-05-185.95.7Cisco Identity Services Engine Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20172
2023-05-185.95.7Cisco Identity Services Engine Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20171
2023-05-185.25.1Cisco Identity Services Engine Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20106
2023-05-184.74.7Cisco Identity Services Engine Web-based Management Interface 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20087
2023-05-184.74.7Cisco Identity Services Engine Web-based Management Interface 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-20077
2023-05-185.05.0Cisco Identity Services Engine Local Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20167
2023-05-185.65.6Cisco Identity Services Engine Local Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20166
2023-05-187.06.9Cisco Identity Services Engine 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20164
2023-05-187.06.9Cisco Identity Services Engine 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20163

134 更多条目未显示

更多条目由 Cisco

Might our Artificial Intelligence support you?

Check our Alexa App!