CVE-2023-20196

Cisco Identity Services Engine (ISE) is affected by two authenticated‑only file upload vulnerabilities due to improper validation of uploaded files via the web management interface. An attacker with valid Administrator credentials can upload arbitrary files, potentially storing them in specific d...