CVE-2012-3908: Cisco Identity Services Engine

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomcat interface) on Cisco Identity Services Engine (ISE) 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators, aka Bug ID CSCty46684.

Affected products

• Cisco Identity Services Engine
• Cisco Identity Services Engine Software: version 1.0 only; version 1.0.4 only; version 1.0mr only; version 1.1 only; version 1.1.1 only

Published 2012-09-16. Last modified 2026-06-16.