CVEvulnerability
CVE-2014-0680
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCui15038.
Affected configurations
• cisco identity services engine
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/102588 osvdb.org
- http://secunia.com/advisories/56672 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0680 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32617 tools.cisco.com
- http://www.securityfocus.com/bid/65227 www.securityfocus.com
- http://www.securitytracker.com/id/1029701 www.securitytracker.com
- http://osvdb.org/102588 osvdb.org
- http://secunia.com/advisories/56672 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0680 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32617 tools.cisco.com
- http://www.securityfocus.com/bid/65227 www.securityfocus.com
- http://www.securitytracker.com/id/1029701 www.securitytracker.com