CVE-2023-20208

MEDIUM

Cisco Identity Services Engine - Authenticated Stored Cross-Site Scripting

Title source: llm
STIX 2.1

Description

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the web-based management interface of an affected device.

References (1)

Core 1

Scores

CVSS v3 4.8
EPSS 0.0005
EPSS Percentile 14.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79 CWE-87
Status published
Products (3)
cisco/identity_services_engine 3.0.0 (8 CPE variants)
cisco/identity_services_engine 3.1 (6 CPE variants)
cisco/identity_services_engine 3.2
Published Nov 21, 2023
Tracked Since Feb 18, 2026