CVE-2013-5524

Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
VendorProductVersion
ciscoidentity_services_engine_software
𝑥
≤ 1.2
ciscoidentity_services_engine_software
1.0
ciscoidentity_services_engine_software
1.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/98166
http://secunia.com/advisories/55067
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5524
http://tools.cisco.com/security/center/viewAlert.x?alertId=31159
http://www.securityfocus.com/bid/62870
http://www.securitytracker.com/id/1029155
https://exchange.xforce.ibmcloud.com/vulnerabilities/87722
http://osvdb.org/98166
http://secunia.com/advisories/55067
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5524
http://tools.cisco.com/security/center/viewAlert.x?alertId=31159
http://www.securityfocus.com/bid/62870
http://www.securitytracker.com/id/1029155
https://exchange.xforce.ibmcloud.com/vulnerabilities/87722