First published: Wed Nov 06 2024(Updated: )
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to either bypass the authorization mechanisms or conduct a cross-site scripting (XSS) attack.For more information about these vulnerabilities, see the Details section of this advisory.Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-vulns-AF544ED5
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Identity Services Engine (ISE) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of cisco-sa-ise-multi-vulns-AF544ED5 is classified as high due to its potential impact on authorization and security.
To fix cisco-sa-ise-multi-vulns-AF544ED5, apply the latest security patches provided by Cisco for the Identity Services Engine.
cisco-sa-ise-multi-vulns-AF544ED5 is associated with authorization bypass and cross-site scripting (XSS) attacks.
Authenticated, remote attackers can exploit the vulnerabilities in cisco-sa-ise-multi-vulns-AF544ED5.
All versions of Cisco Identity Services Engine can be affected by cisco-sa-ise-multi-vulns-AF544ED5.