XSS in Cisco Identity Services Engine Software
CVE-2013-5524
Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.015 (71.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Identity_services_engine_software — versions 1.0, 1.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (x_refsource_OSVDB, vdb-entry)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)