Medium WID-SEC-2023-0401 1 CVE

Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Cross-Site Scripting

Published Feb 15, 2023 · Updated Feb 15, 2023 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE) < 3.2 P1

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Identity Services Engine (ISE) ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 1

Medium 6.1

CVE-2023-20085

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenti…

Cisco Cisco Identity Services Engine Software Network devices

Feb 16, 2023

Revision history

2023-02-15 #1
Initiale Fassung

References

Cisco Security Advisory cisco-sa-ise-xss-ubfHG75C vom 2023-02-15
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-ubfHG75C