Class familyCisco · Identity Services Engine
Cisco Identity Services Engine incorrect Use of Privileged APIs flaws, 2022–2026
3 Identity Services Engine CVEs with CWE-648 weaknesses, 3 Nov 2022 to 16 Sep 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2022’22
1 2023’23
2024’24
2025’25
1 2026’26
In CISA KEVNot in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-20956 | 3 Nov 2022 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an… | Grouped by weakness | 19.5 |
| CVE-2022-20965 | 18 Jan 2023 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated… | Grouped by weakness | 12.9 |
| CVE-2026-76460KEV | 16 Sep 2026 | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | Grouped by weakness | 79.9 |