{"affected":[{"defaultStatus":"unknown","product":"Cisco Identity Services Engine Software","source":"CNA: cisco","vendor":"Cisco","versions":[{"status":"affected","version":"3.1.0"},{"status":"affected","version":"3.1.0 p1"},{"status":"affected","version":"3.1.0 p3"},{"status":"affected","version":"3.1.0 p2"},{"status":"affected","version":"3.2.0"},{"status":"affected","version":"3.1.0 p4"},{"status":"affected","version":"3.1.0 p5"},{"status":"affected","version":"3.2.0 p1"},{"status":"affected","version":"3.1.0 p6"},{"status":"affected","version":"3.2.0 p2"},{"status":"affected","version":"3.1.0 p7"},{"status":"affected","version":"3.3.0"},{"status":"affected","version":"3.2.0 p3"},{"status":"affected","version":"3.2.0 p4"},{"status":"affected","version":"3.1.0 p8"},{"status":"affected","version":"3.2.0 p5"},{"status":"affected","version":"3.2.0 p6"},{"status":"affected","version":"3.1.0 p9"},{"status":"affected","version":"3.3 Patch 2"},{"status":"affected","version":"3.3 Patch 1"},{"status":"affected","version":"3.3 Patch 3"},{"status":"affected","version":"3.4.0"},{"status":"affected","version":"3.2.0 p7"},{"status":"affected","version":"3.3 Patch 4"},{"status":"affected","version":"3.4 Patch 1"},{"status":"affected","version":"3.1.0 p10"},{"status":"affected","version":"3.3 Patch 5"},{"status":"affected","version":"3.3 Patch 6"},{"status":"affected","version":"3.4 Patch 2"},{"status":"affected","version":"3.3 Patch 7"},{"status":"affected","version":"3.4 Patch 3"},{"status":"affected","version":"3.5.0"},{"status":"affected","version":"3.4 Patch 4"},{"status":"affected","version":"3.3 Patch 8"},{"status":"affected","version":"3.2 Patch 8"},{"status":"affected","version":"3.5 Patch 1"},{"status":"affected","version":"3.3 Patch 9"},{"status":"affected","version":"3.2 Patch 9"},{"status":"affected","version":"3.4 Patch 5"},{"status":"affected","version":"3.5 Patch 3"},{"status":"affected","version":"3.5 Patch 2"},{"status":"affected","version":"3.3 Patch 10"},{"status":"affected","version":"3.3 Patch 11"},{"status":"affected","version":"3.4 Patch 6"},{"status":"affected","version":"3.2 Patch 10"},{"status":"affected","version":"3.1.0 p11"},{"status":"affected","version":"3.1.0 p12"},{"status":"affected","version":"3.2 Patch 11"}]},{"defaultStatus":"unknown","product":"Cisco ISE Passive Identity Connector","source":"CNA: cisco","vendor":"Cisco","versions":[{"status":"affected","version":"3.2.0"},{"status":"affected","version":"3.1.0"},{"status":"affected","version":"3.3.0"},{"status":"affected","version":"3.4.0"},{"status":"affected","version":"3.5.0"}]}],"cveId":"CVE-2026-20285","cwes":["CWE-285"],"description":"A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device.\r\n\r\nThis vulnerability is due to the lack of server-side validation of Administrator permissions. An attacker could exploit this vulnerability by submitting a crafted HTTP request to an affected system. A successful exploit could allow the attacker to modify descriptions of files on a specific page. To exploit this vulnerability, an attacker would need valid Administrator credentials.","epss":{"date":"2026-11-10","percentile":0.41289,"score":0.00474},"exploits":[],"kev":null,"metrics":[{"score":4.3,"severity":"medium","source":"CNA: cisco","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},{"score":4.3,"severity":"medium","source":"NVD: psirt@cisco.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"}],"modifiedAt":1794352641173,"publishedAt":1789590275392,"references":[{"source":"CNA: cisco","tags":[],"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-auth-bypass-1-MxcTNgwx"},{"source":"psirt@cisco.com","tags":[],"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-auth-bypass-1-MxcTNgwx"}],"remediation":[],"revision":"5d7e91adaa96c3c5ad3f6e7901c4a1e365c147a2788c755ce136ddd1114c4b84","sources":[{"modifiedAt":1794350589126,"name":"CNA: cisco","retrievedAt":1794352510015,"url":"https://www.cve.org/CVERecord?id=CVE-2026-20285"},{"modifiedAt":1794352641173,"name":"NVD","retrievedAt":1794356176613,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20285"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794352516854,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-20285"}],"ssvc":{"assessedAt":1789742191335,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Cisco Identity Services Engine Authorization Bypass Vulnerability","updatedAt":1794356176613}