Skip to content
OpenAdvisories
Medium WID-SEC-2026-0128 2 CVEs

Cisco ISE und ISE-PIC: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Jan 15, 2026 · Updated Jan 15, 2026 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) und and Cisco ISE Passive Identity Connector (ISE-PIC) ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 2

  • Medium 4.8
    CVE-2026-20047

    Cisco Identity Services Engine Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the …

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 4.8
    CVE-2026-20076

    Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to ins…

    Cisco Cisco Identity Services Engine Software Network devices

Revision history

  1. #1

    Initiale Fassung

References