CVE-2016-6453

Severity: high (CVSS 7.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-11-03 · updated 2026-06-17
Weakness: CWE-89

Description

A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. More Information: CSCva46542. Known Affected Releases: 1.3(0.876).

Affected products

Cisco Identity Services Engine: 1.3(0.876)

References

http://www.securityfocus.com/bid/93897
http://www.securitytracker.com/id/1037109
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ise
http://www.securityfocus.com/bid/93897
http://www.securitytracker.com/id/1037109
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ise

Get alerted when CVE-2016-6453 or the next vulnerability affects your stack