Skip to content
OpenAdvisories
Medium WID-SEC-2026-0039 1 CVE

Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Offenlegung von Informationen

Published Jan 7, 2026 · Updated Jan 7, 2026 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Identity Services Engine (ISE) ausnutzen, um Informationen offenzulegen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 1

  • Medium 4.9
    CVE-2026-20029

    Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability

    A vulnerability in the licensing features of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with administrative privileges to gain access to sensitive information.&nbs…

    Cisco Cisco Identity Services Engine Software Network devices

Revision history

  1. #1

    Initiale Fassung

References