CVSS 5.4 · Medium EPSS 0,36%
Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada cisco identity services engine. Skor CVSS 3.1 5.4 (Medium) menurut NVD.
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| cisco | identity services engine | Versi 1.0 |
| cisco | identity services engine | Versi 1.0.4 |
| cisco | identity services engine | Versi 1.1 |
| cisco | identity services engine | Versi 1.1.1 |
| cisco | identity services engine | Versi 1.1.2 |
| cisco | identity services engine | Versi 1.1.3 |
| cisco | identity services engine | Versi 1.1.4 |
| cisco | identity services engine | Versi 1.2 |
| cisco | identity services engine | Versi 1.2(1.199) |
| cisco | identity services engine | Versi 1.2.1 |
| cisco | identity services engine | Versi 1.3 |
| cisco | identity services engine | Versi 1.3(0.722) |
| cisco | identity services engine | Versi 1.3(0.876) |
| cisco | identity services engine | Versi 1.3(0.909) |
| cisco | identity services engine | Versi 1.3(106.146) |
| cisco | identity services engine | Versi 1.3(120.135) |
| cisco | identity services engine | Versi 1.4 |
| cisco | identity services engine | Versi 1.4(0.109) |
| cisco | identity services engine | Versi 1.4(0.181) |
| cisco | identity services engine | Versi 1.4(0.253) |
| cisco | identity services engine | Versi 1.4(0.908) |
| cisco | identity services engine | Versi 2.0 |
| cisco | identity services engine | Versi 2.0(0.147) |
| cisco | identity services engine | Versi 2.0(0.169) |
| cisco | identity services engine | Versi 2.0(0.222) |
| cisco | identity services engine | Versi 2.0(0.234) |
| cisco | identity services engine | Versi 2.0(0.249) |
| cisco | identity services engine | Versi 2.0(0.306) |
| cisco | identity services engine | Versi 2.0(1.130) |
| cisco | identity services engine | Versi 2.0.1 |
| cisco | identity services engine | Versi 2.1 |
| cisco | identity services engine | Versi 2.1(0.474) |
| cisco | identity services engine | Versi 2.1(0.476) |
| cisco | identity services engine | Versi 2.1(0.800) |
| cisco | identity services engine | Versi 2.1(0.904) |
| cisco | identity services engine | Versi 2.1(0.907) |
| cisco | identity services engine | Versi 2.1(102.101) |
| cisco | identity services engine | Versi 2.1(102.103) |
| cisco | identity services engine | Versi 2.2 |
| cisco | identity services engine | Versi 2.2(0.283) |
| cisco | identity services engine | Versi 2.2(0.470) |
| cisco | identity services engine | Versi 2.2(0.471) |
| cisco | identity services engine | Versi 2.2(0.903) |
| cisco | identity services engine | Versi 2.2(0.909) |
| cisco | identity services engine | Versi 2.2(0.910) |
| cisco | identity services engine | Versi 2.2(1.145) |
| cisco | identity services engine | Versi 2.2.0 |
| cisco | identity services engine | Versi 2.2.0 patch1 |
| cisco | identity services engine | Versi 2.2.0 patch10 |
| cisco | identity services engine | Versi 2.2.0 patch12 |
| cisco | identity services engine | Versi 2.2.0 patch13 |
| cisco | identity services engine | Versi 2.2.0 patch14 |
| cisco | identity services engine | Versi 2.2.0 patch15 |
| cisco | identity services engine | Versi 2.2.0 patch16 |
| cisco | identity services engine | Versi 2.2.0 patch17 |
| cisco | identity services engine | Versi 2.2.0 patch2 |
| cisco | identity services engine | Versi 2.2.0 patch3 |
| cisco | identity services engine | Versi 2.2.0 patch4 |
| cisco | identity services engine | Versi 2.2.0 patch5 |
| cisco | identity services engine | Versi 2.2.0 patch6 |