Summary
Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in der Cisco Identity Services Engine (ISE) ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.
Product
Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.
Vulnerabilities 2
-
Medium 6.7
A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, r…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to con…
Revision history
-
#1
Initiale Fassung
References
-
Cisco Security Advisory vom 2023-11-15
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-j-KxpNynR