cisco-sa-ise-xss1-rgxYry2V: Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss1-rgxYry2V
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-ise-xss1-rgxYry2V?
The severity of cisco-sa-ise-xss1-rgxYry2V is classified as high due to the potential for cross-site scripting attacks.
How do I fix cisco-sa-ise-xss1-rgxYry2V?
To fix cisco-sa-ise-xss1-rgxYry2V, upgrade Cisco Identity Services Engine to version 2.6 P10 or a later version.
What versions are affected by cisco-sa-ise-xss1-rgxYry2V?
cisco-sa-ise-xss1-rgxYry2V affects all versions of Cisco Identity Services Engine prior to 2.4 and 2.6 versions prior to P10.
What type of attack does cisco-sa-ise-xss1-rgxYry2V enable?
cisco-sa-ise-xss1-rgxYry2V enables cross-site scripting (XSS) attacks against users of the Cisco Identity Services Engine management interface.
What should I monitor for regarding cisco-sa-ise-xss1-rgxYry2V?
You should monitor for unusual activity or potential exploitation attempts targeting the web-based management interface of Cisco Identity Services Engine.