CVEvulnerability
CVE-2013-5524
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-10-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.
Affected configurations
• cisco identity services engine software (<= 1.2)
• cisco identity services engine software 1.0
• cisco identity services engine software 1.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/98166 osvdb.org
- http://secunia.com/advisories/55067 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5524 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31159 Vendor Advisory
- http://www.securityfocus.com/bid/62870 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029155 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87722 exchange.xforce.ibmcloud.com
- http://osvdb.org/98166 osvdb.org
- http://secunia.com/advisories/55067 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5524 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31159 Vendor Advisory
- http://www.securityfocus.com/bid/62870 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029155 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87722 exchange.xforce.ibmcloud.com