Identity Services Engine Software@1.0 Security Vulnerabilities and Issues — Identity Services Engine Software@1.0 CVE List

Lucene search

CiscoIdentity Services Engine Software1.0

5 matches found

CVE•added 2013/10/10 10:55 a.m.•46 views

CVE-2013-5523

The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" i...

4.3CVSS6.5AI score0.00545EPSS

CVE•added 2013/10/25 3:52 a.m.•46 views

CVE-2013-5530

The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1 before 1.1.1.268-7, 1.1.2 before 1.1.2.145-10, 1.1.3 before 1.1.3.124-7, 1.1.4 before 1.1.4.218-7, and 1.2 before 1.2.0.899-2 allows remote authenticated users to execute arbitrary commands via a craft...

9CVSS7.3AI score0.0037EPSS

CVE•added 2013/10/10 10:55 a.m.•41 views

CVE-2013-5525

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.

6.5CVSS8.2AI score0.0076EPSS

CVE•added 2013/10/25 3:52 a.m.•41 views

CVE-2013-5531

Cisco Identity Services Engine (ISE) 1.x before 1.1.1 allows remote attackers to bypass authentication, and read support-bundle configuration and credentials data, via a crafted session on TCP port 443, aka Bug ID CSCty20405.

5CVSS6.7AI score0.00248EPSS

CVE•added 2013/10/10 10:55 a.m.•37 views

CVE-2013-5524

Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.

4.3CVSS5.9AI score0.00561EPSS