Uniqcli
Build a Quote

Cisco ISE (Identity Services Engine) Security Advisories & Vulnerabilities

Recent Cisco PSIRT advisories affecting Identity Services Engine network access control and policy. Search, check severity and CVSS, and get a remediation or refresh quote from an authorized Cisco partner.

Explore Cisco ISE (Identity Services Engine)Assess & quote

26 recent advisories affecting Cisco ISE (Identity Services Engine)

  • Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

    Critical · CVSS 9.1
    CVE-2026-20181, CVE-2026-20190Published Jun 17, 2026cisco-sa-ise-multi-G5WP8vv

    Affected: Cisco Identity Services Engine Software , Cisco ISE Passive Identity Connector

  • Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities

    Critical · CVSS 9.9
    CVE-2026-20147, CVE-2026-20148Published Apr 15, 2026cisco-sa-ise-rce-traversal-8bYndVrZ

    Affected: Cisco Identity Services Engine Software , Cisco ISE Passive Identity Connector

  • Cisco Identity Services Engine Remote Code Execution Vulnerabilities

    Critical · CVSS 9.9
    CVE-2026-20180, CVE-2026-20186Published Apr 15, 2026cisco-sa-ise-rce-4fverepv

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities

    Critical · CVSS 10
    CVE-2025-20281, CVE-2025-20282, CVE-2025-20337Published Jun 25, 2025cisco-sa-ise-unauth-rce-ZAd2GnJ6

    Affected: Cisco Identity Services Engine Software , Cisco ISE Passive Identity Connector

  • Cisco Identity Services Engine on Cloud Platforms Static Credential Vulnerability

    Critical · CVSS 9.9
    CVE-2025-20286Published Jun 4, 2025cisco-sa-ise-aws-static-cred-FPMjUcm7

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities

    Critical · CVSS 9.9
    CVE-2025-20124, CVE-2025-20125Published Feb 5, 2025cisco-sa-ise-multivuls-FTW9AOXF

    Affected: Cisco Identity Services Engine Software , Cisco ISE Passive Identity Connector

  • Apache Struts Vulnerability Affecting Cisco Products: December 2023

    Critical · CVSS 9.8
    CVE-2023-50164Published Dec 12, 2023cisco-sa-struts-C2kCMkmT

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine RADIUS Suppression Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2025-20343Published Nov 5, 2025cisco-sa-ise-radsupress-dos-8YF3JThh

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine RADIUS Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2025-20152Published May 21, 2025cisco-sa-ise-restart-ss-uf986G2Q

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Arbitrary File Upload Vulnerability

    High · CVSS 4.7
    CVE-2024-20296Published Jul 17, 2024cisco-sa-ise-file-upload-krW2TxA9

    Affected: Cisco Identity Services Engine Software

  • Cisco Secure Client for Linux with ISE Posture Module Privilege Escalation Vulnerability

    High · CVSS 7.3
    CVE-2024-20338Published Mar 6, 2024cisco-sa-secure-privesc-sYxQO6ds

    Affected: Cisco Secure Client

  • Cisco Identity Services Engine Command Injection Vulnerabilities

    High · CVSS 8.8
    CVE-2023-20170, CVE-2023-20175Published Nov 1, 2023cisco-sa-ise-injection-QeXegrCw

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Vulnerabilities

    High · CVSS 4.7
    CVE-2023-20195, CVE-2023-20196, CVE-2023-20213Published Nov 1, 2023cisco-sa-ise-file-upload-FceLP4xs

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine RADIUS Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2023-20243Published Sep 6, 2023cisco-sa-ise-radius-dos-W7cNn7gt

    Affected: Cisco Identity Services Engine Software

  • Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities

    High · CVSS 7.8
    CVE-2023-20121, CVE-2023-20122Published Apr 5, 2023cisco-sa-adeos-MLAyEcvk

    Affected: Cisco Identity Services Engine Software , Cisco Prime Infrastructure , Cisco Evolved Programmable Network Manager (EPNM)

  • Cisco Identity Services Engine Vulnerabilities

    High · CVSS 6.3
    CVE-2022-20964, CVE-2022-20965, CVE-2022-20966, CVE-2022-20967Published Nov 16, 2022cisco-sa-ise-7Q4TNYUx

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Insufficient Access Control Vulnerability

    High · CVSS 7.1
    CVE-2022-20956Published Nov 2, 2022cisco-sa-ise-access-contol-EeufSUCx

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability

    High · CVSS 8.8
    CVE-2022-20961Published Nov 2, 2022cisco-sa-ise-csrf-vgNtTpAs

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Unauthorized File Access Vulnerability

    High · CVSS 7.1
    CVE-2022-20822Published Oct 19, 2022cisco-sa-ise-path-trav-Dz5dpzyM

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine RADIUS Service Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20756Published Mar 2, 2022cisco-sa-ise-dos-JLh9TxBp

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Privilege Escalation Vulnerability

    High · CVSS 7.5
    CVE-2021-1594Published Oct 6, 2021cisco-sa-ise-priv-esc-UwqPrBM3

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Path Traversal Vulnerability

    Medium · CVSS 5.5
    CVE-2026-20146Published Jul 15, 2026cisco-sa-ise-traversal-xNt7wb2Y

    Affected: Cisco Identity Services Engine Software , Cisco ISE Passive Identity Connector

  • Cisco Identity Services Engine Authentication Bypass Vulnerabilities

    Medium · CVSS 5.3
    CVE-2026-20193, CVE-2026-20195Published May 6, 2026cisco-sa-ise-unauth-bypass-uxjRXGpb

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability

    Medium · CVSS 6
    CVE-2026-20136Published Apr 15, 2026cisco-sa-ise-cmd-inj-5WSJcYJB

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities

    Medium · CVSS 4.8
    CVE-2026-20132Published Apr 15, 2026cisco-sa-isexss-BS8ctE7U

    Affected: Cisco Identity Services Engine Software

  • Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

    Medium · CVSS 4.8
    CVE-2025-20204, CVE-2025-20205Published Feb 5, 2025cisco-sa-ise-xss-42tgsdMG

    Affected: Cisco Identity Services Engine Software

Free exposure report

Find out which Cisco vulnerabilities affect your Cisco ISE (Identity Services Engine)

Send your device list, PIDs, or serials and an authorized Cisco partner will map them to current PSIRT advisories, flag what is end-of-life, and return the patch or refresh path — GPC-payable, with TAA-compliant options. No cost, no obligation.

  • Affected CVEs & severity
  • Fixed release or replacement
  • End-of-life check
  • GPC-payable quote
Check end-of-life

Frequently asked questions

What are the latest Cisco ISE (Identity Services Engine) security advisories?

This page lists recent Cisco security advisories affecting Cisco ISE (Identity Services Engine), from the Cisco PSIRT openVuln feed, with severity, CVSS, and CVEs. Confirm the affected software versions against what you run.

How do I fix a Cisco ISE (Identity Services Engine) vulnerability?

Most Cisco vulnerabilities are fixed by upgrading to a patched software release or applying the documented mitigation. If the platform is end-of-life, the remedy is a refresh. Uniqcli, an authorized Cisco partner, scopes the patch or replacement and can quote it TAA-compliant and GPC-payable.

Is Cisco ISE (Identity Services Engine) still supported?

Security fixes are only available while a product is supported. Check our Cisco end-of-life lookup to confirm the Last Date of Support, then patch (if supported) or plan a refresh with Uniqcli.

Data from the Cisco PSIRT openVuln API, shown for reference; Cisco’s official advisories are authoritative. Cisco and PSIRT are trademarks of Cisco Systems, Inc.; Uniqcli LLC is an independent authorized Cisco partner.