Identity Services Engine Software@* Security Vulnerabilities and Issues — Identity Services Engine Software@* CVE List

Lucene search

CiscoIdentity Services Engine Software*

3 matches found

CVE•added 2013/10/10 10:55 a.m.•46 views

CVE-2013-5523

The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" i...

4.3CVSS6.5AI score0.00545EPSS

CVE•added 2013/10/10 10:55 a.m.•41 views

CVE-2013-5525

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.

6.5CVSS8.2AI score0.0076EPSS

CVE•added 2013/10/10 10:55 a.m.•37 views

CVE-2013-5524

Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.

4.3CVSS5.9AI score0.00561EPSS