Improper input validation in Cisco Identity_services_engine_software
CVE-2015-4266
The web interface in Cisco Identity Services Engine (ISE) 1.1(4.1), 1.3(106.146), and 1.3(120.135) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecifie…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.012 (63.8th percentile) — read the EPSS interpretation.
Affected products
- Cisco Identity_services_engine_software — versions 1.1\(4.1\), 1.3\(106.146\), 1.3\(120.135\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)