CVE-2013-5504
Cisco Identity Services Engine Software - Cross-Site Scripting via MDM Portal Parameter
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1029110
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/97877
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5504
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/87531
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=31007
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/62694
Scores
EPSS
0.0149
EPSS Percentile
71.4%
Details
CWE
CWE-79
Status
published
Products (1)
cisco/identity_services_engine_software
Published
Sep 30, 2013
Tracked Since
Feb 18, 2026