CVE-2016-9198

HIGH 7.5CVE-2016-9198 · Published 14/12/2016 · updated 17/06/2026

In short

CVE-2016-9198 is a HIGH (CVSS 7.5) vulnerability affecting identity services engine (cisco).
Chance of exploitation in the next 30 days (EPSS): 3.3%, higher than 88.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
identity services engine cisco	`= 1.2(1.199)`	No fix yet

Description

A vulnerability in the Active Directory integration component of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a denial of service (DoS) attack. More Information: CSCuw15041. Known Affected Releases: 1.2(1.199).

References

securityfocus.com/bid/94810 · Third Party Advisory
securitytracker.com/id/1037415 · Third Party Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ise · Mitigation

More vulnerabilities in identity services engine

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

identity services engine

cisco

= 1.2(1.199)

No fix yet

More vulnerabilities in identity services engine

See all →