CVE-2011-3290

CWE-2553 documents3 sources
Severity
10.0CRITICAL
EPSS
1.5%
top 18.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Identity Services Engine Software
Timeline
PublishedSep 21
Latest updateMay 17

Description

Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-rccw-f2p8-cj94: Cisco Identity Services Engine (ISE) before 1↗2022-05-17
▶
CVEList
CVE-2011-3290: Cisco Identity Services Engine (ISE) before 1↗2011-09-21
▶
CVE-2011-3290 (CRITICAL CVSS 10) | Cisco Identity Services Engine (ISE | cvebase.io