CVE-2018-15424CWE-20

Multiple Vulnerabilities in Cisco Identity Services Engine

published October 5, 2018

CVSS
—
EPSS
1%
Percentile
72.8
In the wild
Unconfirmed
What it is

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01430 · 72.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-10-05T14:00Z
EPSS history
Timeline
  • 05 OCT 14:00Z
    Multiple Vulnerabilities in Cisco Identity Services Engine
    cvelistv5