CVE-2017-3835: Cisco Identity Services Engine Software

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access notices owned by other users, because of SQL Injection. More Information: CSCvb15627. Known Affected Releases: 1.4(0.908).

Affected products

• Cisco Identity Services Engine Software: version 1.4(0.908) only

Published 2017-02-22. Last modified 2026-06-17.