CVE-2016-6453

A vulnerability in the web framework code of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. More Information: CSCva46542. Known Affected Releases: 1.30.876...

CVE-2016-6453

Cisco Identity Services Engine (ISE) web framework vulnerability (CVE-2016-6453) allows an authenticated, remote attacker to execute arbitrary SQL commands on the ISE database via crafted URLs. The issue stems from insufficient controls over SQL statements in the web framework interface, affectin...