PT-2014-3776

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE versions 1.2 patch 2 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a report containing a crafted URL that is not properly handled...

CVE-2014-0681: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Identity Services Engine ISE 1.2 patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via a report containing a crafted URL that is not properly handled during generation of report-output pages, aka Bug ID CSCui15064...