XSS in Cisco Identity Services Engine Software

CVE-2013-3413

Cross-site scripting (XSS) vulnerability in the search form in the administration/monitoring panel on the Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuh87036.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.