CVE-2026-20247

7.5 Élevée

Publiée le 16/09/2026 à 23:17 · Modifiée le 18/09/2026 à 15:28 · En attente d'analyse NVD · Source : psirt@cisco.com

Description

A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to modify data in the underlying database.

Traduire en français

Produits concernés

Cisco Identity Services Engine Software

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	psirt@cisco.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-89

Références

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-sql-inj-3QTKR947

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories