CVE-2013-5504

Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266.

Score

CVSS 2.0 4.3 Medium

Status

Modified - psirt@cisco.com

Published

2013-09-30

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Identity Services Engine Software (Cisco)

References

• http://osvdb.org/97877
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5504
• http://tools.cisco.com/security/center/viewAlert.x?alertId=31007
• http://www.securityfocus.com/bid/62694
• http://www.securitytracker.com/id/1029110
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87531