CVE-2022-20967

🗓️ 18 Jan 2023 17:48:19Reported by ciscoType

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attack

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the External RADIUS Server component of the Cisco Identity Services Engine (ISE) management interface allows a perpetrator to perform cross-site scripting attacks.	5 Dec 202200:00	–	bdu_fstec
Circl	CVE-2022-20967	28 Nov 202217:20	–	circl
Cisco	Cisco Identity Services Engine Vulnerabilities	16 Nov 202216:00	–	cisco
Tenable Nessus	Cisco Identity Services Engine Vulnerabilities (cisco-sa-ise-7Q4TNYUx)	30 Dec 202200:00	–	nessus
CNNVD	Cisco Identity Services Engine 跨站脚本漏洞	16 Nov 202200:00	–	cnnvd
CVE	CVE-2022-20967	18 Jan 202317:48	–	cve
EUVD	EUVD-2022-26217	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco Identity Services Engine (ISE).	17 Nov 202200:00	–	ncsc
NVD	CVE-2022-20967	20 Jan 202307:15	–	nvd
Prion	Cross site scripting	20 Jan 202307:15	–	prion

[
  {
    "vendor": "Cisco",
    "product": "Cisco Identity Services Engine Software",
    "versions": [
      {
        "version": "2.6.0",
        "status": "affected"
      },
      {
        "version": "2.6.0 p1",
        "status": "affected"
      },
      {
        "version": "2.6.0 p2",
        "status": "affected"
      },
      {
        "version": "2.6.0 p3",
        "status": "affected"
      },
      {
        "version": "2.6.0 p5",
        "status": "affected"
      },
      {
        "version": "2.6.0 p6",
        "status": "affected"
      },
      {
        "version": "2.6.0 p7",
        "status": "affected"
      },
      {
        "version": "2.6.0 p8",
        "status": "affected"
      },
      {
        "version": "2.6.0 p9",
        "status": "affected"
      },
      {
        "version": "2.6.0 p10",
        "status": "affected"
      },
      {
        "version": "2.6.0 p11",
        "status": "affected"
      },
      {
        "version": "2.6.0 p12",
        "status": "affected"
      },
      {
        "version": "2.7.0",
        "status": "affected"
      },
      {
        "version": "2.7.0 p1",
        "status": "affected"
      },
      {
        "version": "2.7.0 p2",
        "status": "affected"
      },
      {
        "version": "2.7.0 p3",
        "status": "affected"
      },
      {
        "version": "2.7.0 p4",
        "status": "affected"
      },
      {
        "version": "2.7.0 p5",
        "status": "affected"
      },
      {
        "version": "2.7.0 p6",
        "status": "affected"
      },
      {
        "version": "2.7.0 p7",
        "status": "affected"
      },
      {
        "version": "3.0.0",
        "status": "affected"
      },
      {
        "version": "3.0.0 p1",
        "status": "affected"
      },
      {
        "version": "3.0.0 p2",
        "status": "affected"
      },
      {
        "version": "3.0.0 p3",
        "status": "affected"
      },
      {
        "version": "3.0.0 p4",
        "status": "affected"
      },
      {
        "version": "3.0.0 p5",
        "status": "affected"
      },
      {
        "version": "3.0.0 p6",
        "status": "affected"
      },
      {
        "version": "3.1.0",
        "status": "affected"
      },
      {
        "version": "3.1.0 p1",
        "status": "affected"
      },
      {
        "version": "3.1.0 p3",
        "status": "affected"
      },
      {
        "version": "3.1.0 p4",
        "status": "affected"
      },
      {
        "version": "3.1.0 p5",
        "status": "affected"
      },
      {
        "version": "3.2.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-7Q4TNYUx

25 Jan 2024 16:57Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.14.8

EPSS0.00541