Advisory Engine

← Home

Cisco Identity Services Engine SQL Injection Vulnerabilities

Source: cisco / cisco-sa-ise-sql-inj-3QTKR947 — original advisory

Published: 2026-09-16 · Last updated: 2026-09-16 · Vendor severity: High

CVEs

CVECVSSCWEExploitation
CVE-2026-20247 7.5 CWE-89: SQL Injection Not observed in the wild
CVE-2026-20300 7.5 CWE-89: SQL Injection Not observed in the wild

Affected Products

ProductAffected versionsFixed version
Cisco Identity Services Engine Software 3.1.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p10 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p11 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p7 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p8 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p9 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p7 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2 Patch 10 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2 Patch 8 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2 Patch 9 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 10 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 11 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 7 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 8 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 9 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5 Patch 1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5 Patch 2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5 Patch 3 Not specified by vendor Not specified by vendor