Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown
CVE-2016-1485
Disclosure Date: August 22, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497.
0
Attacker Value
Unknown
CVE-2015-6317
Disclosure Date: January 23, 2016 (last updated November 25, 2024)
Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926.
0
Attacker Value
Unknown
CVE-2015-6323
Disclosure Date: January 15, 2016 (last updated November 25, 2024)
The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253.
0
Attacker Value
Unknown
CVE-2015-4266
Disclosure Date: July 16, 2015 (last updated October 05, 2023)
The web interface in Cisco Identity Services Engine (ISE) 1.1(4.1), 1.3(106.146), and 1.3(120.135) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCut04556.
0
Attacker Value
Unknown
CVE-2015-4267
Disclosure Date: July 15, 2015 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(0.793), 1.3(0.876), 1.4(0.109), 2.0(0.147), and 2.0(0.169) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus09940.
0
Attacker Value
Unknown
CVE-2015-4268
Disclosure Date: July 14, 2015 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine (ISE) 1.2(1.198) and 1.3(0.876) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCus16052.
0
Attacker Value
Unknown
CVE-2015-4182
Disclosure Date: June 12, 2015 (last updated October 05, 2023)
The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change settings, via unspecified vectors, aka Bug ID CSCui72087.
0
Attacker Value
Unknown
CVE-2015-0757
Disclosure Date: May 29, 2015 (last updated October 05, 2023)
The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140.
0
