Non notée
CVE-2018-0289 A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote…
Description
A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of requests stored in logs in the application management interface. An attacker could exploit this vulnerability by sending malicious requests to the targeted system. An exploit could allow the attacker to conduct cross-site scripting attacks when an administrator views the log files. Cisco Bug IDs: CSCvh11308.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Identity Services Engine | Versions non publiées |
Références
- 1040925 www.securitytracker.com
- 104196 www.securityfocus.com
- tools.cisco.com tools.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Identity Services Engine
Les 21 CVE de Cisco Identity Services Engine →
CVE-2018-0327
A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote…
Non notée
CVE-2018-0277
A vulnerability in the Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) certificate validation…
Non notée
CVE-2018-0275
A vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow an authenticated,…
Non notée
CVE-2018-0215
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an…
Non notée