https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:40:40 +0000 https://cve.radiocsirt.org/vuln/cisco-sa-20170705-ise1 <p>A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation and output-encoding parameters for data that is passed between an affected client and server. An attacker could exploit this vulnerability by intercepting targeted user packets and injecting malicious code into the targeted traffic stream. A successful exploit could allow the attacker to inject script code into the HTTP flow between the targeted user and the affected system. For additional information about cross-site scripting attacks and the methods used to exploit these vulnerabilities, see the Cisco Applied Mitigation Bulletin Understanding Cross-Site Scripting (XSS) Threat Vectors [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20060922-understanding-xss&#34;] and the OWASP reference page Cross-site Scripting (XSS) [&#34;https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)&#34;]. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation and output-encoding parameters for data that is passed between an affected client and server. An attacker could exploit this vulnerability by intercepting targeted user packets and injecting malicious code into the targeted traffic stream. A successful exploit could allow the attacker to inject script code into the HTTP flow between the targeted user and the affected system. For additional information about cross-site scripting attacks and the methods used to exploit these vulnerabilities, see the Cisco Applied Mitigation Bulletin Understanding Cross-Site Scripting (XSS) Threat Vectors [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20060922-understanding-xss&#34;] and the OWASP reference page Cross-site Scripting (XSS) [&#34;https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)&#34;]. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-20170705-ise1 https://cve.radiocsirt.org/vuln/cnvd-2017-22157 cnvd-2017-22157 https://cve.radiocsirt.org/vuln/cnvd-2017-22157 https://cve.radiocsirt.org/vuln/euvd-2026-74173 EUVD-2026-74173 https://cve.radiocsirt.org/vuln/euvd-2026-74173 https://cve.radiocsirt.org/vuln/fkie_cve-2017-6733 <p>A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvd87482. Known Affected Releases: 2.1(102.101) 2.2(0.283) 2.3(0.151).</p> <p>A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvd87482. Known Affected Releases: 2.1(102.101) 2.2(0.283) 2.3(0.151).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-6733 https://cve.radiocsirt.org/vuln/ghsa-3vfm-97xm-8mvv <p>A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvd87482. Known Affected Releases: 2.1(102.101) 2.2(0.283) 2.3(0.151).</p> <p>A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvd87482. Known Affected Releases: 2.1(102.101) 2.2(0.283) 2.3(0.151).</p> https://cve.radiocsirt.org/vuln/ghsa-3vfm-97xm-8mvv https://cve.radiocsirt.org/vuln/gsd-2017-6733 gsd-2017-6733 https://cve.radiocsirt.org/vuln/gsd-2017-6733