Medium WID-SEC-2024-0055 1 CVE

Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Cross-Site Scripting

Published Jan 10, 2024 · Updated Jan 10, 2024 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE) Product: Identity Services Engine (ISE) < 3.1P8 Product: Identity Services Engine (ISE) < 3.2P5 Product: Identity Services Engine (ISE) < 3.3P1

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Identity Services Engine (ISE) ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 1

Medium 4.8

CVE-2024-20251

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authentica…

Cisco Cisco Identity Services Engine Software Network devices

Jan 17, 2024

Revision history

2024-01-10 #1
Initiale Fassung

References

Cisco Security Advisory vom 2024-01-10
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-XSS-bL4VTML