CVE-2024-20251

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

• cisco identity services engine 1.0 • cisco identity services engine 1.0.4 • cisco identity services engine 1.1 • cisco identity services engine 1.1.1 • cisco identity services engine 1.1.2 • cisco identity services engine 1.1.3 • cisco identity services engine 1.1.4 • cisco identity services engine 1.2 • cisco identity services engine 1.2\(1.199\) • cisco identity services engine 1.2.1 • cisco identity services engine 1.3 • cisco identity services engine 1.3\(0.722\) • cisco identity services engine 1.3\(0.876\) • cisco identity services engine 1.3\(0.909\) • cisco identity services engine 1.3\(106.146\) • cisco identity services engine 1.3\(120.135\) • cisco identity services engine 1.4 • cisco identity services engine 1.4\(0.109\) • cisco identity services engine 1.4\(0.181\) • cisco identity services engine 1.4\(0.253\) • cisco identity services engine 1.4\(0.908\) • cisco identity services engine 2.0 • cisco identity services engine 2.0\(0.147\) • cisco identity services engine 2.0\(0.169\) • cisco identity services engine 2.0\(0.222\) • cisco identity services engine 2.0\(0.234\) • cisco identity services engine 2.0\(0.249\) • cisco identity services engine 2.0\(0.306\) • cisco identity services engine 2.0\(1.130\) • cisco identity services engine 2.0.1 • cisco identity services engine 2.1 • cisco identity services engine 2.1\(0.474\) • cisco identity services engine 2.1\(0.476\) • cisco identity services engine 2.1\(0.800\) • cisco identity services engine 2.1\(0.904\) • cisco identity services engine 2.1\(0.907\) • cisco identity services engine 2.1\(102.101\) • cisco identity services engine 2.1\(102.103\) • cisco identity services engine 2.2 • cisco identity services engine 2.2\(0.283\) • cisco identity services engine 2.2\(0.470\) • cisco identity services engine 2.2\(0.471\) • cisco identity services engine 2.2\(0.903\) • cisco identity services engine 2.2\(0.909\) • cisco identity services engine 2.2\(0.910\) • cisco identity services engine 2.2\(1.145\) • cisco identity services engine 2.2.0 • cisco identity services engine 2.2.0.470 • cisco identity services engine 2.3 • cisco identity services engine 2.3\(0.151\) • cisco identity services engine 2.3\(0.298\) • cisco identity services engine 2.3\(0.904\) • cisco identity services engine 2.3\(0.905\) • cisco identity services engine 2.3.0 • cisco identity services engine 2.3.0.298 • cisco identity services engine 2.4 • cisco identity services engine 2.4\(0.192\) • cisco identity services engine 2.4\(0.247\) • cisco identity services engine 2.4\(0.357\) • cisco identity services engine 2.4\(0.901\) … and 30 more