CVE-2021-34702

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information. This vulnerability is due to improper enforcement of administrator privilege levels for low-value sensitive data. An attacker...

CVE-2021-1594

A vulnerability in the REST API of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to perform a command injection attack and elevate privileges to root. This vulnerability is due to insufficient input validation for specific API endpoints. An attacker in a...

Command injection

A vulnerability in the REST API of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to perform a command injection attack and elevate privileges to root. This vulnerability is due to insufficient input validation for specific API endpoints. An attacker in a...

Input validation

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information. This vulnerability is due to improper enforcement of administrator privilege levels for low-value sensitive data. An attacker...

CVE-2021-1594

CVE-2021-1594 affects Cisco Identity Services Engine (ISE). The REST API is vulnerable to a command injection due to insufficient input validation on specific endpoints. An unauthenticated, remote attacker could leverage this by positioning themselves in a Man-in-the-Middle role to intercept and ...

CVE-2021-34702

CVE-2021-34702 affects Cisco Identity Services Engine (ISE) via the web-based management interface. The issue is an improper enforcement of administrator privilege levels for low-value sensitive data, allowing an authenticated, read-only administrator to browse to pages containing sensitive data ...

CVE-2021-34706

CVE-2021-34706 concerns the Cisco Identity Services Engine (ISE) web-based management interface. The vulnerability is an XML External Entity (XXE) injection in the XML parser, allowing an authenticated, remote attacker to upload crafted XML to trigger external entity references. Reported impacts ...

CVE-2021-34759

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the...

CVE-2021-34759

CVE-2021-34759 affects Cisco Identity Services Engine (ISE). The flaw is in the web-based management interface’s input validation, enabling an authenticated attacker with administrative credentials to perform a cross-site scripting (XSS) attack against users of the ISE interface. Exploitation cou...

CVE-2021-1605

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1607

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1607 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1607

CVE-2021-1607 affects Cisco Identity Services Engine (ISE). The stored cross-site scripting vulnerabilities arise in the web-based management interface, caused by insufficient validation of user-supplied input. An authenticated attacker with administrative credentials could inject malicious code ...

CVE-2021-1606

CVE-2021-1606 affects Cisco Identity Services Engine (ISE) via stored XSS in the web-based management interface caused by insufficient input validation. An authenticated attacker with valid admin credentials could inject malicious script into certain pages, allowing execution of arbitrary code in...

CVE-2021-1606 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1606 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1605 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1605

CVE-2021-1605 relates to Cisco Identity Services Engine (ISE) Web management interface. The issue is a set of stored cross-site scripting (XSS) vulnerabilities caused by insufficient validation of user-supplied input, enabling an authenticated, remote attacker with valid administrative credential...

CVE-2021-1604

Cisco Identity Services Engine (ISE) is affected by multiple stored cross-site scripting (XSS) vulnerabilities in its web-based management interface due to insufficient validation of user-supplied input. An authenticated attacker with administrative credentials could inject malicious code into sp...