Unscored CVE-2013-5525 EUVD-2013-5365GHSA-67q2-r7xw-j63p

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users …

Published Oct 10, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.

References

cisco-ise-cve20135525-sql-injection(87723) vdb-entry
1029156 vdb-entry
55098 third-party-advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=31160
20131007 Cisco Identity Services Engine Blind SQL Injection Vulnerability vendor-advisory
98167 vdb-entry