Not rated
CVE-2018-0289 A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote…
Description
A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of requests stored in logs in the application management interface. An attacker could exploit this vulnerability by sending malicious requests to the targeted system. An exploit could allow the attacker to conduct cross-site scripting attacks when an administrator views the log files. Cisco Bug IDs: CSCvh11308.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Identity Services Engine | Versions not published |
References
- 1040925 www.securitytracker.com
- 104196 www.securityfocus.com
- tools.cisco.com tools.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Identity Services Engine
The 21 CVEs of Cisco Identity Services Engine →
CVE-2018-0327
A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote…
Not rated
CVE-2018-0277
A vulnerability in the Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) certificate validation…
Not rated
CVE-2018-0275
A vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow an authenticated,…
Not rated
CVE-2018-0215
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an…
Not rated