cisco-sa-ise-file-upload-FceLP4xs: Cisco Identity Services Engine Vulnerabilities
First published: Wed Nov 01 2023(Updated: )
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an attacker to upload arbitrary files or disable Cisco Discovery Protocol (CDP) processing on an affected device.For more information about these vulnerabilities, see the '#details'
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Identity Services Engine (ISE) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of cisco-sa-ise-file-upload-FceLP4xs?
The severity of cisco-sa-ise-file-upload-FceLP4xs is high due to its potential to allow unauthorized file uploads.
How do I fix cisco-sa-ise-file-upload-FceLP4xs?
To fix cisco-sa-ise-file-upload-FceLP4xs, update your Cisco Identity Services Engine to the latest version provided by Cisco.
Which versions of Cisco Identity Services Engine are affected by cisco-sa-ise-file-upload-FceLP4xs?
Cisco Identity Services Engine versions prior to the latest update are affected by cisco-sa-ise-file-upload-FceLP4xs.
What types of attacks can cisco-sa-ise-file-upload-FceLP4xs facilitate?
cisco-sa-ise-file-upload-FceLP4xs can facilitate attacks involving arbitrary file uploads and potentially disabling CDP processing.
Is there a workaround for cisco-sa-ise-file-upload-FceLP4xs?
Currently, the recommended action for cisco-sa-ise-file-upload-FceLP4xs is to apply the necessary updates, as there are no effective workarounds.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-recent
- source/Cisco
- agent/title
- agent/weakness
- agent/references
- agent/severity
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco identity services engine (ise)