CVE-2013-5504: XSS
First published: Mon Sep 30 2013(Updated: )
Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Identity Services Engine |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/97877
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5504
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31007
- http://www.securityfocus.com/bid/62694
- http://www.securitytracker.com/id/1029110
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87531
Frequently Asked Questions
What is the severity of CVE-2013-5504?
CVE-2013-5504 is classified as a high severity vulnerability due to the potential for remote code execution via cross-site scripting.
How do I fix CVE-2013-5504?
To fix CVE-2013-5504, update the Cisco Identity Services Engine software to the latest version provided by Cisco.
What kind of attack can CVE-2013-5504 enable?
CVE-2013-5504 can enable attackers to perform cross-site scripting (XSS) attacks through the Mobile Device Management portal.
Which software is affected by CVE-2013-5504?
CVE-2013-5504 affects Cisco Identity Services Engine Software.
Is CVE-2013-5504 a local or remote vulnerability?
CVE-2013-5504 is a remote vulnerability, allowing attackers to exploit it from a distant location.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco identity services engine