Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) have multiple internally discovered vulnerabilities related to improper neutralization of special elements (CWE-74). These issues were identified during an internal security review and addressed in a software hardening release. The vulnerabilities have a CVSS 3.1 score of 6.5, indicating a medium to high severity with potential for high confidentiality and integrity impact but no availability impact. No specific affected versions or patch details are provided in the available data.