Skip to content
OpenAdvisories
Medium WID-SEC-2026-1391 2 CVEs

Cisco Identity Services Engine (ISE): Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published May 6, 2026 · Updated May 6, 2026 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um Informationen offenzulegen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 2

  • Medium 5.3
    CVE-2026-20195

    Cisco Identity Services Engine Observable Response Discrepancy Vulnerability

    A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to enumerate valid user accounts on an affected device. This vulnerability exists because error messages are observed when the affected API end…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 4.3
    CVE-2026-20193

    Cisco Identity Services Engine Authentication Bypass Vulnerability

    A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain unauthorized access to sensitive information on an affected device. This vulnerability is due to…

    Cisco Cisco Identity Services Engine Software Network devices

Revision history

  1. #1

    Initiale Fassung

References