CVE-2021-34706

CVE-2021-34706 concerns the Cisco Identity Services Engine (ISE) web-based management interface. The vulnerability is an XML External Entity (XXE) injection in the XML parser, allowing an authenticated, remote attacker to upload crafted XML to trigger external entity references. Reported impacts ...

CVE-2021-34759

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the...

CVE-2021-34759

CVE-2021-34759 affects Cisco Identity Services Engine (ISE). The flaw is in the web-based management interface’s input validation, enabling an authenticated attacker with administrative credentials to perform a cross-site scripting (XSS) attack against users of the ISE interface. Exploitation cou...

CVE-2021-1605

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1607

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1607 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1607

CVE-2021-1607 affects Cisco Identity Services Engine (ISE). The stored cross-site scripting vulnerabilities arise in the web-based management interface, caused by insufficient validation of user-supplied input. An authenticated attacker with administrative credentials could inject malicious code ...

CVE-2021-1606

CVE-2021-1606 affects Cisco Identity Services Engine (ISE) via stored XSS in the web-based management interface caused by insufficient input validation. An authenticated attacker with valid admin credentials could inject malicious script into certain pages, allowing execution of arbitrary code in...

CVE-2021-1606 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1606 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1605 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1605

CVE-2021-1605 relates to Cisco Identity Services Engine (ISE) Web management interface. The issue is a set of stored cross-site scripting (XSS) vulnerabilities caused by insufficient validation of user-supplied input, enabling an authenticated, remote attacker with valid administrative credential...

CVE-2021-1604

Cisco Identity Services Engine (ISE) is affected by multiple stored cross-site scripting (XSS) vulnerabilities in its web-based management interface due to insufficient validation of user-supplied input. An authenticated attacker with administrative credentials could inject malicious code into sp...

CVE-2021-1603 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1603

CVE-2021-1603 affects Cisco Identity Services Engine (ISE) web-based management interface. The issue is stored cross-site scripting (XSS) vulnerabilities caused by insufficient validation of user-supplied input, exploitable by an authenticated attacker who has administrative credentials to inject...

CVE-2021-1603 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1134

A vulnerability in the Cisco Identity Services Engine ISE integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 certificate used when...

CVE-2021-1134

Root cause: incomplete validation of the X.509 certificate during the TLS connection between Cisco DNA Center and an ISE server (ISE-DNA Center integration).Affected: Cisco DNA Center Software with the ISE integration feature (versions affected are not always specified in all sources; CNVD notes ...