Test Kennung:	1.3.6.1.4.1.25623.1.0.106452
Kategorie:	CISCO
Titel:	Cisco Identity Services Engine Cross-Site Scripting Vulnerability
Zusammenfassung:	Cisco Identity Services Engine (ISE) contains a vulnerability that could;allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the;web interface of the affected system.
Beschreibung:	Summary: Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. Vulnerability Insight: The vulnerability is due to insufficient input validation of some parameters passed via HTTP GET or POST methods. Vulnerability Impact: An attacker may be able to exploit this vulnerability by intercepting the user packets and injecting the malicious code. Affected Software/OS: Cisco Identity Services Engine software release 2.0(1.130) Solution: See the vendors advisory for solutions. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9214 BugTraq ID: 94807 http://www.securityfocus.com/bid/94807 http://www.securitytracker.com/id/1037417
Copyright	Copyright (C) 2016 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.