CVE-2018-0339

CVE-2018-0339 describes a cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE). The issue arises from insufficient input validation of certain parameters, enabling an unauthenticated, remote attacker to lure a user into clicking a ...