CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-20132

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative write privileges to conduct a stored cross-site scripting (XSS) attack or a reflected XSS attack against a user of the web-based management interface of an affected device. These vulnerabilities are due to insufficient sanitization of user-supplied data that is stored in the web page. An attacker could exploit these vulnerabilities by convincing a user of the interface to click a specific link or view an affected web page. The injected script code may be executed in the context of the web-based management interface or allow the attacker to access sensitive browser-based information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 7.0%

CVSS Severity

CVSS v3 Score 4.8

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-isexss-BS8ctE7U

Products affected by CVE-2026-20132

Cisco » Identity Services Engine » Version: N/A

cpe:2.3:a:cisco:identity_services_engine:-
Cisco » Identity Services Engine » Version: 002.002(000.916)

cpe:2.3:a:cisco:identity_services_engine:002.002(000.916)
Cisco » Identity Services Engine » Version: 002.003(000.906)

cpe:2.3:a:cisco:identity_services_engine:002.003(000.906)
Cisco » Identity Services Engine » Version: 002.004(000.911)

cpe:2.3:a:cisco:identity_services_engine:002.004(000.911)
Cisco » Identity Services Engine » Version: 002.004(000.914)

cpe:2.3:a:cisco:identity_services_engine:002.004(000.914)
Cisco » Identity Services Engine » Version: 002.006(000.156)

cpe:2.3:a:cisco:identity_services_engine:002.006(000.156)
Cisco » Identity Services Engine » Version: 002.006(000.902)

cpe:2.3:a:cisco:identity_services_engine:002.006(000.902)
Cisco » Identity Services Engine » Version: 002.007(000.356)

cpe:2.3:a:cisco:identity_services_engine:002.007(000.356)
Cisco » Identity Services Engine » Version: 003.000(000.458)

cpe:2.3:a:cisco:identity_services_engine:003.000(000.458)
Cisco » Identity Services Engine » Version: 003.001(000.518)

cpe:2.3:a:cisco:identity_services_engine:003.001(000.518)
Cisco » Identity Services Engine » Version: 003.002(000.116)

cpe:2.3:a:cisco:identity_services_engine:003.002(000.116)
Cisco » Identity Services Engine » Version: 1.0

cpe:2.3:a:cisco:identity_services_engine:1.0
Cisco » Identity Services Engine » Version: 1.0.4

cpe:2.3:a:cisco:identity_services_engine:1.0.4
Cisco » Identity Services Engine » Version: 1.1

cpe:2.3:a:cisco:identity_services_engine:1.1
Cisco » Identity Services Engine » Version: 1.1.1

cpe:2.3:a:cisco:identity_services_engine:1.1.1
Cisco » Identity Services Engine » Version: 1.1.2

cpe:2.3:a:cisco:identity_services_engine:1.1.2
Cisco » Identity Services Engine » Version: 1.1.3

cpe:2.3:a:cisco:identity_services_engine:1.1.3
Cisco » Identity Services Engine » Version: 1.1.4

cpe:2.3:a:cisco:identity_services_engine:1.1.4
Cisco » Identity Services Engine » Version: 1.2

cpe:2.3:a:cisco:identity_services_engine:1.2
Cisco » Identity Services Engine » Version: 1.2(1.199)

cpe:2.3:a:cisco:identity_services_engine:1.2(1.199)
Cisco » Identity Services Engine » Version: 1.2.1

cpe:2.3:a:cisco:identity_services_engine:1.2.1
Cisco » Identity Services Engine » Version: 1.3

cpe:2.3:a:cisco:identity_services_engine:1.3
Cisco » Identity Services Engine » Version: 1.3(0.722)

cpe:2.3:a:cisco:identity_services_engine:1.3(0.722)
Cisco » Identity Services Engine » Version: 1.3(0.876)

cpe:2.3:a:cisco:identity_services_engine:1.3(0.876)
Cisco » Identity Services Engine » Version: 1.3(0.909)

cpe:2.3:a:cisco:identity_services_engine:1.3(0.909)
Cisco » Identity Services Engine » Version: 1.3(106.146)

cpe:2.3:a:cisco:identity_services_engine:1.3(106.146)
Cisco » Identity Services Engine » Version: 1.3(120.135)

cpe:2.3:a:cisco:identity_services_engine:1.3(120.135)
Cisco » Identity Services Engine » Version: 1.4

cpe:2.3:a:cisco:identity_services_engine:1.4
Cisco » Identity Services Engine » Version: 1.4(0.109)

cpe:2.3:a:cisco:identity_services_engine:1.4(0.109)
Cisco » Identity Services Engine » Version: 1.4(0.181)

cpe:2.3:a:cisco:identity_services_engine:1.4(0.181)
Cisco » Identity Services Engine » Version: 1.4(0.253)

cpe:2.3:a:cisco:identity_services_engine:1.4(0.253)
Cisco » Identity Services Engine » Version: 1.4(0.908)

cpe:2.3:a:cisco:identity_services_engine:1.4(0.908)
Cisco » Identity Services Engine » Version: 2.0

cpe:2.3:a:cisco:identity_services_engine:2.0
Cisco » Identity Services Engine » Version: 2.0(0.147)

cpe:2.3:a:cisco:identity_services_engine:2.0(0.147)
Cisco » Identity Services Engine » Version: 2.0(0.169)

cpe:2.3:a:cisco:identity_services_engine:2.0(0.169)
Cisco » Identity Services Engine » Version: 2.0(0.222)

cpe:2.3:a:cisco:identity_services_engine:2.0(0.222)
Cisco » Identity Services Engine » Version: 2.0(0.234)

cpe:2.3:a:cisco:identity_services_engine:2.0(0.234)
Cisco » Identity Services Engine » Version: 2.0(0.249)

cpe:2.3:a:cisco:identity_services_engine:2.0(0.249)
Cisco » Identity Services Engine » Version: 2.0(0.306)

cpe:2.3:a:cisco:identity_services_engine:2.0(0.306)
Cisco » Identity Services Engine » Version: 2.0(1.130)

cpe:2.3:a:cisco:identity_services_engine:2.0(1.130)
Cisco » Identity Services Engine » Version: 2.0.1

cpe:2.3:a:cisco:identity_services_engine:2.0.1
Cisco » Identity Services Engine » Version: 2.1

cpe:2.3:a:cisco:identity_services_engine:2.1
Cisco » Identity Services Engine » Version: 2.1(0.474)

cpe:2.3:a:cisco:identity_services_engine:2.1(0.474)
Cisco » Identity Services Engine » Version: 2.1(0.476)

cpe:2.3:a:cisco:identity_services_engine:2.1(0.476)
Cisco » Identity Services Engine » Version: 2.1(0.800)

cpe:2.3:a:cisco:identity_services_engine:2.1(0.800)
Cisco » Identity Services Engine » Version: 2.1(0.904)

cpe:2.3:a:cisco:identity_services_engine:2.1(0.904)
Cisco » Identity Services Engine » Version: 2.1(0.907)

cpe:2.3:a:cisco:identity_services_engine:2.1(0.907)
Cisco » Identity Services Engine » Version: 2.1(102.101)

cpe:2.3:a:cisco:identity_services_engine:2.1(102.101)
Cisco » Identity Services Engine » Version: 2.1(102.103)

cpe:2.3:a:cisco:identity_services_engine:2.1(102.103)
Cisco » Identity Services Engine » Version: 2.1.0

cpe:2.3:a:cisco:identity_services_engine:2.1.0
Cisco » Identity Services Engine » Version: 2.1_base

cpe:2.3:a:cisco:identity_services_engine:2.1_base
Cisco » Identity Services Engine » Version: 2.2

cpe:2.3:a:cisco:identity_services_engine:2.2
Cisco » Identity Services Engine » Version: 2.2(0.283)

cpe:2.3:a:cisco:identity_services_engine:2.2(0.283)
Cisco » Identity Services Engine » Version: 2.2(0.470)

cpe:2.3:a:cisco:identity_services_engine:2.2(0.470)
Cisco » Identity Services Engine » Version: 2.2(0.471)

cpe:2.3:a:cisco:identity_services_engine:2.2(0.471)
Cisco » Identity Services Engine » Version: 2.2(0.903)

cpe:2.3:a:cisco:identity_services_engine:2.2(0.903)
Cisco » Identity Services Engine » Version: 2.2(0.909)

cpe:2.3:a:cisco:identity_services_engine:2.2(0.909)
Cisco » Identity Services Engine » Version: 2.2(0.910)

cpe:2.3:a:cisco:identity_services_engine:2.2(0.910)
Cisco » Identity Services Engine » Version: 2.2(1.145)

cpe:2.3:a:cisco:identity_services_engine:2.2(1.145)
Cisco » Identity Services Engine » Version: 2.2.0

cpe:2.3:a:cisco:identity_services_engine:2.2.0
Cisco » Identity Services Engine » Version: 2.2.0.470

cpe:2.3:a:cisco:identity_services_engine:2.2.0.470
Cisco » Identity Services Engine » Version: 2.3

cpe:2.3:a:cisco:identity_services_engine:2.3
Cisco » Identity Services Engine » Version: 2.3(0.151)

cpe:2.3:a:cisco:identity_services_engine:2.3(0.151)
Cisco » Identity Services Engine » Version: 2.3(0.298)

cpe:2.3:a:cisco:identity_services_engine:2.3(0.298)
Cisco » Identity Services Engine » Version: 2.3(0.904)

cpe:2.3:a:cisco:identity_services_engine:2.3(0.904)
Cisco » Identity Services Engine » Version: 2.3(0.905)

cpe:2.3:a:cisco:identity_services_engine:2.3(0.905)
Cisco » Identity Services Engine » Version: 2.3.0

cpe:2.3:a:cisco:identity_services_engine:2.3.0
Cisco » Identity Services Engine » Version: 2.3.0.298

cpe:2.3:a:cisco:identity_services_engine:2.3.0.298
Cisco » Identity Services Engine » Version: 2.4

cpe:2.3:a:cisco:identity_services_engine:2.4
Cisco » Identity Services Engine » Version: 2.4(0.192)

cpe:2.3:a:cisco:identity_services_engine:2.4(0.192)
Cisco » Identity Services Engine » Version: 2.4(0.247)

cpe:2.3:a:cisco:identity_services_engine:2.4(0.247)
Cisco » Identity Services Engine » Version: 2.4(0.357)

cpe:2.3:a:cisco:identity_services_engine:2.4(0.357)
Cisco » Identity Services Engine » Version: 2.4(0.901)

cpe:2.3:a:cisco:identity_services_engine:2.4(0.901)
Cisco » Identity Services Engine » Version: 2.4(0.901.1)

cpe:2.3:a:cisco:identity_services_engine:2.4(0.901.1)
Cisco » Identity Services Engine » Version: 2.4(0.902)

cpe:2.3:a:cisco:identity_services_engine:2.4(0.902)
Cisco » Identity Services Engine » Version: 2.4(0.903)

cpe:2.3:a:cisco:identity_services_engine:2.4(0.903)
Cisco » Identity Services Engine » Version: 2.4(0.904)

cpe:2.3:a:cisco:identity_services_engine:2.4(0.904)
Cisco » Identity Services Engine » Version: 2.4(100.159)

cpe:2.3:a:cisco:identity_services_engine:2.4(100.159)
Cisco » Identity Services Engine » Version: 2.4.0

cpe:2.3:a:cisco:identity_services_engine:2.4.0
Cisco » Identity Services Engine » Version: 2.4.0.357

cpe:2.3:a:cisco:identity_services_engine:2.4.0.357
Cisco » Identity Services Engine » Version: 2.5

cpe:2.3:a:cisco:identity_services_engine:2.5
Cisco » Identity Services Engine » Version: 2.5(0.1)

cpe:2.3:a:cisco:identity_services_engine:2.5(0.1)
Cisco » Identity Services Engine » Version: 2.5(0.225)

cpe:2.3:a:cisco:identity_services_engine:2.5(0.225)
Cisco » Identity Services Engine » Version: 2.5(0.353)

cpe:2.3:a:cisco:identity_services_engine:2.5(0.353)
Cisco » Identity Services Engine » Version: 2.6

cpe:2.3:a:cisco:identity_services_engine:2.6
Cisco » Identity Services Engine » Version: 2.6(0.156)

cpe:2.3:a:cisco:identity_services_engine:2.6(0.156)
Cisco » Identity Services Engine » Version: 2.6(0.999)

cpe:2.3:a:cisco:identity_services_engine:2.6(0.999)
Cisco » Identity Services Engine » Version: 2.6.0

cpe:2.3:a:cisco:identity_services_engine:2.6.0
Cisco » Identity Services Engine » Version: 2.6.0.156

cpe:2.3:a:cisco:identity_services_engine:2.6.0.156
Cisco » Identity Services Engine » Version: 2.7

cpe:2.3:a:cisco:identity_services_engine:2.7
Cisco » Identity Services Engine » Version: 2.7(0.207)

cpe:2.3:a:cisco:identity_services_engine:2.7(0.207)
Cisco » Identity Services Engine » Version: 2.7(0.356)

cpe:2.3:a:cisco:identity_services_engine:2.7(0.356)
Cisco » Identity Services Engine » Version: 2.7(0.903)

cpe:2.3:a:cisco:identity_services_engine:2.7(0.903)
Cisco » Identity Services Engine » Version: 2.7.0

cpe:2.3:a:cisco:identity_services_engine:2.7.0
Cisco » Identity Services Engine » Version: 2.7.0.356

cpe:2.3:a:cisco:identity_services_engine:2.7.0.356
Cisco » Identity Services Engine » Version: 3.0(0.458)

cpe:2.3:a:cisco:identity_services_engine:3.0(0.458)
Cisco » Identity Services Engine » Version: 3.0.0

cpe:2.3:a:cisco:identity_services_engine:3.0.0
Cisco » Identity Services Engine » Version: 3.1

cpe:2.3:a:cisco:identity_services_engine:3.1
Cisco » Identity Services Engine » Version: 3.1(0.440)

cpe:2.3:a:cisco:identity_services_engine:3.1(0.440)
Cisco » Identity Services Engine » Version: 3.1(0.518)

cpe:2.3:a:cisco:identity_services_engine:3.1(0.518)
Cisco » Identity Services Engine » Version: 3.1.0

cpe:2.3:a:cisco:identity_services_engine:3.1.0
Cisco » Identity Services Engine » Version: 3.2

cpe:2.3:a:cisco:identity_services_engine:3.2
Cisco » Identity Services Engine » Version: 3.2(0.149)

cpe:2.3:a:cisco:identity_services_engine:3.2(0.149)
Cisco » Identity Services Engine » Version: 3.2.0

cpe:2.3:a:cisco:identity_services_engine:3.2.0
Cisco » Identity Services Engine » Version: 3.3.0

cpe:2.3:a:cisco:identity_services_engine:3.3.0
Cisco » Identity Services Engine » Version: 3.4.0

cpe:2.3:a:cisco:identity_services_engine:3.4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-20132

Products

Pricing

Contact Us