WID-SEC-2024-1797 — Cisco Identity Services Engine (ISE): Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 2

Medium 5.4

CVE-2024-20443

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to con…

Cisco Cisco Identity Services Engine Software Cisco Adaptive Security Appliance (ASA) Software Network devices

Aug 7, 2024
Medium 4.8

CVE-2024-20479

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to con…

Cisco Cisco Identity Services Engine Software Network devices

Aug 7, 2024

Revision history

2024-08-07 #1
Initiale Fassung

References

Cisco Security Advisories vom 2024-08-07
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-V2bm9JCY