Cisco Identity Services Engine Cross-Site Scripting Vulnerability

According to its self-reported version, Cisco Identity Services Engine Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

CVE-2020-3157

Cisco ISE (Identity Services Engine) web-based management interface is vulnerable to Cross-Site Scripting (XSS) due to insufficient validation of user-supplied input. An authenticated attacker with write permissions can craft and save a malicious configuration, enabling script execution in the ad...