XSS in Cisco Identity Services Engine Software
CVE-2013-5505
Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30275.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.013 (68.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Identity_services_engine_software
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_OSVDB, vdb-entry)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)