CVE-2014-0681

Cisco Identity Services Engine (ISE) 1.2 patch 2 and earlier is affected by a cross-site scripting (XSS) vulnerability in the report output pages. The root cause is insufficient input validation when generating reports, allowing an unauthenticated, remote attacker to inject arbitrary web script o...