EPSS 0.00 (nejvyšší)
Cisco Identity Services Engine SQL and HQL Injection Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct SQL or HQL injection attacks on an affected device. These vulnerabilities are due to insufficient validation of user-supplied input to the affected APIs before it is used to build database queries. An attacker could exploit these vulnerabilities by sending a crafted request to an affected device. A successful exploit could…
Cisco US
CVE v události 4
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-76448 | 4.9 3.1 · cisco | – | 0.00 |
| CVE-2026-76449 | 4.9 3.1 · cisco | – | 0.00 |
| CVE-2026-76450 | 4.9 3.1 · cisco | – | 0.00 |
| CVE-2026-76451 | 4.9 3.1 · cisco | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.