| Package | Affected versions | Patched versions |
|---|---|---|
| identity services engine software | ≤ 1.2 |
Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine (ISE) 1.2 patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via a report containing a crafted URL that is not properly handled during generation of report-output pages, aka Bug ID CSCui15064.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free