CVE-2014-8015: Cisco Identity Services Engine Software

Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbitrary sponsor's guest account via a modified HTTP request, aka Bug ID CSCur64400.

Affected products

• Cisco Identity Services Engine Software: affected versions not specified

Published 2014-12-22. Last modified 2026-06-17.