Unscored CVE-2014-3275 EUVD-2014-3288GHSA-5rqq-hhv5-9282

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier allows remote authenti…

Published May 23, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCul21337.

References

67555 vdb-entry
20140521 Cisco ISE Blind SQL Injection Vulnerability vendor-advisory
1030273 vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=34328