VULNERABILITY INTELLIGENCE

CVE-2018-15425

CVSS score4.7 MEDIUM

EPSS probability1.59%

CISA KEVNot currently listed

Published2018-10-05

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server.

Weakness classification

CWE-20: Improper Input Validation
CWE-502: Deserialization of Untrusted Data

Primary references

psirt@cisco.com — Third Party Advisory, VDB Entry
psirt@cisco.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory