CVE-2015-4268
Cisco Identity Services Engine 1.2(1.198) and 1.3(0.876) - Cross-Site Scripting in Infra Admin UI
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine (ISE) 1.2(1.198) and 1.3(0.876) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCus16052.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39873
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032889
Scores
EPSS
0.0155
EPSS Percentile
72.4%
Details
CWE
CWE-79
Status
published
Products (2)
cisco/identity_services_engine_software
1.2\(1.198\)
cisco/identity_services_engine_software
1.3\(0.876\)
Published
Jul 14, 2015
Tracked Since
Feb 18, 2026