| Package | Affected versions | Patched versions |
|---|---|---|
| identity services engine | = 002.004(000.914)= 002.006(000.156)= 002.007(000.356)= 003.000(000.458)= 1.0= 1.0.4= 1.1= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.2= 1.2(1.199)= 1.2.1= 1.3= 1.3(0.722)= 1.3(0.876)= 1.3(0.909)= 1.3(106.146)= 1.3(120.135)= 1.4= 1.4(0.109)= 1.4(0.181)= 1.4(0.253)= 1.4(0.908)= 2.0= 2.0(0.147)= 2.0(0.169)= 2.0(0.222)= 2.0(0.234)= 2.0(0.249)= 2.0(0.306)= 2.0(1.130)= 2.0.1= 2.1= 2.1(0.474)= 2.1(0.476)= 2.1(0.800)= 2.1(0.904)= 2.1(0.907)= 2.1(102.101)= 2.1(102.103)= 2.2= 2.2(0.283)= 2.2(0.470)= 2.2(0.471)= 2.2(0.903)= 2.2(0.909)= 2.2(0.910)= 2.2(1.145)= 2.2.0= 2.2.0.470= 2.3= 2.3(0.151)= 2.3(0.298)= 2.3(0.904)= 2.3(0.905)= 2.3.0= 2.3.0.298= 2.4= 2.4(0.192)= 2.4(0.247)= 2.4(0.357)= 2.4(0.901)= 2.4(0.901.1)= 2.4(0.902)= 2.4(0.903)= 2.4(0.904)= 2.4(100.159)= 2.4.0= 2.4.0.357= 2.5= 2.5(0.1)= 2.5(0.225)= 2.5(0.353)= 2.6= 2.6(0.156)= 2.6(0.999)= 2.6.0= 2.6.0.156= 2.7 |
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free= 2.7(0.207)= 2.7(0.356)= 2.7(0.903)= 2.7.0= 2.7.0.356= 3.0(0.458)= 3.0.0= 3.1= 3.2