CVE-2016-9214

MEDIUM

Cisco ISE <2.0.101.130 - XSS

Title source: llm

Description

Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvb86332 CSCvb86760. Known Affected Releases: 2.0(101.130).

References (3)

Scores

CVSS v3 6.1
EPSS 0.0035
EPSS Percentile 57.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE
CWE-79
Status published

Affected Products (2)

cisco/identity_services_engine_software
n/a/Cisco Identity Services Engine (ISE) < Cisco Identity Services Engine (ISE)

Timeline

Published Dec 14, 2016
Tracked Since Feb 18, 2026