Description
Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.
References
- 1029155 vdb-entry
- 55067 third-party-advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31159
- cisco-ise-cve20135524-xss(87722) vdb-entry
- 20131007 Cisco Identity Services Engine Troubleshooting Interface Cross-Site Scripting Vulnerability vendor-advisory
- 98166 vdb-entry
- 62870 vdb-entry