EUVD-2011-0807

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the search form in the administration/monitoring panel on the Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuh87036...

CVE-2013-3413

Cisco Identity Services Engine (ISE) suffers a Cross-Site Scripting (XSS) vulnerability in the admin/monitoring panel search form (CVE-2013-3413). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The advisory notes improper input validation and tha...