VulnerabilityModified
CVE-2013-5505
Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30275.
MEDIUM 4.3EPSS 1.32%
Does this matter?
Lower severity and a low EPSS score (1.32%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30275.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.32% probability · 69th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- cisco/identity services engine software
- Source
- psirt@cisco.com
References
- http://osvdb.org/97875
- http://secunia.com/advisories/54626Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5505Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31008Vendor Advisory
- http://www.securityfocus.com/bid/62693
- http://www.securitytracker.com/id/1029111
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87530
- http://osvdb.org/97875
- http://secunia.com/advisories/54626Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5505Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31008Vendor Advisory
- http://www.securityfocus.com/bid/62693
- http://www.securitytracker.com/id/1029111
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87530
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.