XSS in Cisco Identity_services_engine_software
CVE-2015-4268
Multiple cross-site scripting (XSS) vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine (ISE) 1.2(1.198) and 1.3(0.876) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) G…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.015 (72.3th percentile) — read the EPSS interpretation.
Affected products
- Cisco Identity_services_engine_software — versions 1.2\(1.198\), 1.3\(0.876\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)