CVEvulnerability
CVE-2013-5525
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-10-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.
Affected configurations
• cisco identity services engine software (<= 1.2)
• cisco identity services engine software 1.0
• cisco identity services engine software 1.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/98167 osvdb.org
- http://secunia.com/advisories/55098 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5525 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31160 Vendor Advisory
- http://www.securitytracker.com/id/1029156 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87723 exchange.xforce.ibmcloud.com
- http://osvdb.org/98167 osvdb.org
- http://secunia.com/advisories/55098 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5525 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31160 Vendor Advisory
- http://www.securitytracker.com/id/1029156 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87723 exchange.xforce.ibmcloud.com