CVE-2011-3290

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-09-21 · updated 2026-06-16
Weakness: CWE-255

Description

Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135.

Affected products

Cisco Identity Services Engine: all versions
Cisco Identity Services Engine unknown: through 1.0.4; 1.0, 1.0mr

References

http://secunia.com/advisories/46061
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95105.shtml
http://www.securityfocus.com/bid/49703
http://www.securitytracker.com/id?1026075
https://exchange.xforce.ibmcloud.com/vulnerabilities/69945
http://secunia.com/advisories/46061
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95105.shtml
http://www.securityfocus.com/bid/49703
http://www.securitytracker.com/id?1026075
https://exchange.xforce.ibmcloud.com/vulnerabilities/69945

Get alerted when CVE-2011-3290 or the next vulnerability affects your stack