CVE-2013-5524

Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.

Score

CVSS 2.0 4.3 Medium

Status

Modified - psirt@cisco.com

Published

2013-10-10

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Identity Services Engine Software (Cisco)

References

• http://osvdb.org/98166
• http://secunia.com/advisories/55067
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5524
• http://tools.cisco.com/security/center/viewAlert.x?alertId=31159
• http://www.securityfocus.com/bid/62870
• http://www.securitytracker.com/id/1029155
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87722