Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CNVD-2024-06170)

Cisco Identity Services Engine (ISE) is an environment-aware platform (ISE Identity Services Engine) from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A cross-site scripting vulnerability exists in the Cisco Identity Services Engine, which stems from the lack of effective filtering and escaping of user-supplied data by the application, and can be exploited by a remote, authenticated attacker to perform a stored cross-site scripting (XSS) attack against an interface user on an affected device.