CVE-2015-0757: The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly imple...

Security readout for executives and security teams

Cisco ISE builds 1.2(1.901) and 1.3(0.722) have a web session-handling flaw that could let a remote attacker view sensitive web-page content, including MnT reports. The provided sources do not include CVSS, confirmed exploitation, or a named fix in the bundle. Exposure is likely limited to organizations running Cisco ISE 1.2(1.901) or 1.3(0.722), especially where the ISE web interface or MnT reporting pages are reachable by untrusted users or networks. Treat this as a targeted confidentiality risk for legacy Cisco ISE environments. Priority depends on whether the affected versions are still deployed and how broadly the web interface is reachable. Mitigation focus: Identify any Cisco ISE 1.2(1.901) or 1.3(0.722) deployments.; Review Cisco advisory 39042 and Bug ID CSCuq23140 for vendor fixes or workarounds.; Restrict ISE web and MnT report access to trusted administrative networks..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.