CVE-2017-3835 A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access notices owned by other users, because of SQL Injection. More Infor...
HighCVSS 8.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access notices owned by other users, because of SQL Injection. More Information: CSCvb15627. Known Affected Releases: 1.4(0.908).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco identity services engine software | = 1.4(0.908) | No fix listed |
References
- 96249 vdb-entry
- 1037841 vdb-entry
- tools.cisco.com vendor-advisory