CVE-2015-4267: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE...

Security readout for executives and security teams

CVE-2015-4267 is a Cisco Identity Services Engine web framework CSRF issue. A remote attacker could abuse an authenticated user's browser session to perform actions as that user. The supplied data names affected ISE versions but does not include CVSS, patch details, or confirmed exploitation. Exposure is limited to environments running the listed Cisco ISE versions. Risk is most relevant where users administer or access ISE web functionality and could be induced to interact with attacker-controlled content. Treat this as a targeted legacy Cisco ISE exposure check. It matters because ISE is identity and network access infrastructure, but urgency cannot be rated higher from the supplied evidence alone. Mitigation focus: Check the Cisco advisory for fixed releases and official workarounds.; Identify and retire affected Cisco ISE versions listed in the CVE.; Limit ISE web access to trusted administrative networks where feasible..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.