CVE-2015-6266
Cisco Identity Services Engine Software - Authentication Bypass
Title source: ruleDescription
The guest portal in Cisco Identity Services Engine (ISE) 3300 1.2(0.899) does not restrict access to uploaded HTML documents, which allows remote attackers to obtain sensitive information from customized documents via a direct request, aka Bug ID CSCuo78045.
Scores
EPSS
0.0023
EPSS Percentile
45.5%
Classification
CWE
CWE-287
Status
draft
Affected Products (1)
cisco/identity_services_engine_software
Timeline
Published
Aug 28, 2015
Tracked Since
Feb 18, 2026