Lucene search
HistoryNov 21, 2023 - 7:15 p.m.
CVE-2023-20208
cisco ise
web interface
xss attack
remote attacker
cve-2023-20208
management interface
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
18.0%
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the web-based management interface of an affected device.
Affected configurations
Node
ciscoidentity_services_engineMatch3.0.0-
ORciscoidentity_services_engineMatch3.0.0patch1
ORciscoidentity_services_engineMatch3.0.0patch2
ORciscoidentity_services_engineMatch3.0.0patch3
ORciscoidentity_services_engineMatch3.0.0patch4
ORciscoidentity_services_engineMatch3.0.0patch5
ORciscoidentity_services_engineMatch3.0.0patch6
ORciscoidentity_services_engineMatch3.0.0patch7
ORciscoidentity_services_engineMatch3.1-
ORciscoidentity_services_engineMatch3.1patch1
ORciscoidentity_services_engineMatch3.1patch2
ORciscoidentity_services_engineMatch3.1patch3
ORciscoidentity_services_engineMatch3.1patch4
ORciscoidentity_services_engineMatch3.1patch5
ORciscoidentity_services_engineMatch3.2-
Related
cvelist
cvelist
CVE-2023-20208
2023-11-21 18:48:44
nessus
nessus
Cisco Identity Services Engine XSS (cisco-sa-ise-mult-j-KxpNynR)
2023-11-16 00:00:00
cnvd
cnvd
prion
prion
Design/Logic Flaw
2023-11-21 19:15:00
cve
cve
CVE-2023-20208
2023-11-21 19:15:08
cisco
cisco
Cisco Identity Services Engine Vulnerabilities
2023-11-15 16:00:00
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
18.0%
Related for NVD:CVE-2023-20208