cisco-sa-ise-xss-964cdxW5: Cisco Identity Services Engine Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface.This
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-ise-xss-964cdxW5?
The severity of cisco-sa-ise-xss-964cdxW5 is classified as 'high' due to the potential for cross-site scripting attacks.
How do I fix cisco-sa-ise-xss-964cdxW5?
To fix cisco-sa-ise-xss-964cdxW5, update your Cisco Identity Services Engine and Cisco ISE Passive Identity Connector to the latest patched versions.
What products are affected by cisco-sa-ise-xss-964cdxW5?
The affected products include Cisco Identity Services Engine and Cisco ISE Passive Identity Connector.
Can cisco-sa-ise-xss-964cdxW5 be exploited without authentication?
No, an authenticated remote attacker is required to exploit cisco-sa-ise-xss-964cdxW5.
What type of vulnerability is cisco-sa-ise-xss-964cdxW5?
cisco-sa-ise-xss-964cdxW5 is a Cross-Site Scripting (XSS) vulnerability.