CVE-2016-9214 Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface....
MediumCVSS 6.1
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvb86332 CSCvb86760. Known Affected Releases: 2.0(101.130).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco identity services engine software | = 2.0(1.130) | No fix listed |
References
- 94807 third-party-advisory vdb-entry
- 1037417 third-party-advisory vdb-entry
- tools.cisco.com vendor-advisory