CVE-2015-6317: cisco identity_services_engine_software Improper Access Control
CVSS: 6.8v2.0MediumModified
Published 23-01-2016Last modified 06-08-2024
Vulnerability summary
CVE-2015-6317 is a medium (CVSS 6.8) Improper Access Control vulnerability in cisco identity_services_engine_software. EPSS estimates a 1.46% chance of exploitation in the next 30 days, higher than 73% of scored vulnerabilities.
CVSS score
6.8/10
010
Medium · v2.0 (NVD)EPSS score
1.46%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 23-01-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926.
CVSS metrics
2 scores · 1 source · 2 versionsMedium 6.5Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NSourcesSingle source
Medium 6.8Preferred score · NVD (NIST)
AV:N/AC:L/Au:S/C:N/I:C/A:NSourcesSingle source
EPSS trend
Probability
1.46%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
0.00 pp
From 1.46% on 18-09-2026
18-09-202618-10-2026
EPSS score1.46%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco1 product
- identity_services_engine_software1.0.4.573 | 1.0_base | 1.0_mr_base | 1.1.1:p1 | 1.1.1:p2 | 1.1.1:p3 | 1.1.1:p4 | 1.1.1:p5 | 1.1.1:p6 | 1.1.2:p1 | 1.1.2:p2 | 1.1.2:p3 | 1.1.2:p4 | 1.1.2:p5 | 1.1.2:p6 | 1.1.2:p7 | 1.1.2:p8 | 1.1.2:p9 | 1.1.3:p1 | 1.1.3:p2 | 1.1.3:p3 | 1.1.3:p4 | 1.1.3:p5 | 1.1.3:p6 | 1.1.3:p7 | 1.1.4:p1 | 1.1.4:p2 | 1.1.4:p3 | 1.1.4:p4 | 1.1.4:p5 | 1.1.4:p6 | 1.1.4:p7 | 1.1_base | 1.2\(0.747\) | 1.2\(0.793\) | 1.2\(1.198\) | 1.2\(1.901\) | 1.2.0.899:p14 | 1.2.1:p1 | 1.2.1:p2 | 1.2_base | 1.3\(0.722\) | 1.3\(0.876\) | 1.3\(106.146\) | 1.3\(120.135\) | 1.4\(0.109\) | 1.4\(0.181\) | 1.4\(0.253\)
1 vendor · 1 product
References
2 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-ise2Vendor AdvisoryX Refsource CISCO