CVE-2013-5541: XSS

Published Oct 16, 2013

Updated

Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename, aka Bug ID CSCui67495.

Affected Software

2 affected components

Cisco Identity Services Engine Software

Cisco Identity Services Engine

Event History

Oct 16, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5541?

CVE-2013-5541 has a medium severity level due to its potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2013-5541?

To fix CVE-2013-5541, apply the latest security update provided by Cisco for the Identity Services Engine.

Who is affected by CVE-2013-5541?

CVE-2013-5541 affects remote authenticated users of the Cisco Identity Services Engine who can upload files.

What type of vulnerability is CVE-2013-5541?

CVE-2013-5541 is a cross-site scripting (XSS) vulnerability related to the file-upload interface.

What can an attacker do with CVE-2013-5541?

An attacker exploiting CVE-2013-5541 can inject arbitrary web scripts or HTML into the affected application.