CVEvulnerability
CVE-2013-5523
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-10-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCui82666.
Affected configurations
• cisco identity services engine software (<= 1.2)
• cisco identity services engine software 1.0
• cisco identity services engine software 1.1
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/98168 osvdb.org
- http://secunia.com/advisories/55207 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5523 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31161 Vendor Advisory
- http://www.securityfocus.com/bid/62869 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029157 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87724 exchange.xforce.ibmcloud.com
- http://osvdb.org/98168 osvdb.org
- http://secunia.com/advisories/55207 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5523 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31161 Vendor Advisory
- http://www.securityfocus.com/bid/62869 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029157 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87724 exchange.xforce.ibmcloud.com