5.4

CVE-2024-20251

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Identity Services Engine Version1.0.4
Cisco ≫ Identity Services Engine Version1.1.1
Cisco ≫ Identity Services Engine Version1.1.2
Cisco ≫ Identity Services Engine Version1.1.3
Cisco ≫ Identity Services Engine Version1.1.4
Cisco ≫ Identity Services Engine Version1.2(1.199)
Cisco ≫ Identity Services Engine Version1.2.1
Cisco ≫ Identity Services Engine Version1.3(0.722)
Cisco ≫ Identity Services Engine Version1.3(0.876)
Cisco ≫ Identity Services Engine Version1.3(0.909)
Cisco ≫ Identity Services Engine Version1.3(106.146)
Cisco ≫ Identity Services Engine Version1.3(120.135)
Cisco ≫ Identity Services Engine Version1.4(0.109)
Cisco ≫ Identity Services Engine Version1.4(0.181)
Cisco ≫ Identity Services Engine Version1.4(0.253)
Cisco ≫ Identity Services Engine Version1.4(0.908)
Cisco ≫ Identity Services Engine Version2.0(0.147)
Cisco ≫ Identity Services Engine Version2.0(0.169)
Cisco ≫ Identity Services Engine Version2.0(0.222)
Cisco ≫ Identity Services Engine Version2.0(0.234)
Cisco ≫ Identity Services Engine Version2.0(0.249)
Cisco ≫ Identity Services Engine Version2.0(0.306)
Cisco ≫ Identity Services Engine Version2.0(1.130)
Cisco ≫ Identity Services Engine Version2.0.1
Cisco ≫ Identity Services Engine Version2.1(0.474)
Cisco ≫ Identity Services Engine Version2.1(0.476)
Cisco ≫ Identity Services Engine Version2.1(0.800)
Cisco ≫ Identity Services Engine Version2.1(0.904)
Cisco ≫ Identity Services Engine Version2.1(0.907)
Cisco ≫ Identity Services Engine Version2.1(102.101)
Cisco ≫ Identity Services Engine Version2.1(102.103)
Cisco ≫ Identity Services Engine Version2.2(0.283)
Cisco ≫ Identity Services Engine Version2.2(0.470)
Cisco ≫ Identity Services Engine Version2.2(0.471)
Cisco ≫ Identity Services Engine Version2.2(0.903)
Cisco ≫ Identity Services Engine Version2.2(0.909)
Cisco ≫ Identity Services Engine Version2.2(0.910)
Cisco ≫ Identity Services Engine Version2.2(1.145)
Cisco ≫ Identity Services Engine Version2.2.0 Update-
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch1
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch10
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch12
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch13
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch14
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch15
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch16
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch17
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch2
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch3
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch4
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch5
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch6
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch7
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch8
Cisco ≫ Identity Services Engine Version2.2.0 Updatepatch9
Cisco ≫ Identity Services Engine Version2.2.0.470 Update-
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch1
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch10
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch11
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch12
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch13
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch14
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch15
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch16
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch2
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch3
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch4
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch5
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch6
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch7
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch8
Cisco ≫ Identity Services Engine Version2.2.0.470 Updatepatch9
Cisco ≫ Identity Services Engine Version2.3(0.151)
Cisco ≫ Identity Services Engine Version2.3(0.298)
Cisco ≫ Identity Services Engine Version2.3(0.904)
Cisco ≫ Identity Services Engine Version2.3(0.905)
Cisco ≫ Identity Services Engine Version2.3.0 Update-
Cisco ≫ Identity Services Engine Version2.3.0 Updatepatch1
Cisco ≫ Identity Services Engine Version2.3.0 Updatepatch2
Cisco ≫ Identity Services Engine Version2.3.0 Updatepatch3
Cisco ≫ Identity Services Engine Version2.3.0 Updatepatch4
Cisco ≫ Identity Services Engine Version2.3.0 Updatepatch5
Cisco ≫ Identity Services Engine Version2.3.0 Updatepatch6
Cisco ≫ Identity Services Engine Version2.3.0 Updatepatch7
Cisco ≫ Identity Services Engine Version2.3.0.298 Update-
Cisco ≫ Identity Services Engine Version2.3.0.298 Updatepatch1
Cisco ≫ Identity Services Engine Version2.3.0.298 Updatepatch2
Cisco ≫ Identity Services Engine Version2.3.0.298 Updatepatch3
Cisco ≫ Identity Services Engine Version2.3.0.298 Updatepatch4
Cisco ≫ Identity Services Engine Version2.3.0.298 Updatepatch5
Cisco ≫ Identity Services Engine Version2.3.0.298 Updatepatch6
Cisco ≫ Identity Services Engine Version2.3.0.298 Updatepatch7
Cisco ≫ Identity Services Engine Version2.4(0.192)
Cisco ≫ Identity Services Engine Version2.4(0.247)
Cisco ≫ Identity Services Engine Version2.4(0.357)
Cisco ≫ Identity Services Engine Version2.4(0.901)
Cisco ≫ Identity Services Engine Version2.4(0.901.1)
Cisco ≫ Identity Services Engine Version2.4(0.902)
Cisco ≫ Identity Services Engine Version2.4(0.903)
Cisco ≫ Identity Services Engine Version2.4(0.904)
Cisco ≫ Identity Services Engine Version002.004(000.914) Update-
Cisco ≫ Identity Services Engine Version2.4(100.159)
Cisco ≫ Identity Services Engine Version2.4.0 Update-
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch_11
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch1
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch10
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch11
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch12
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch13
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch14
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch2
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch3
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch4
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch5
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch6
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch7
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch8
Cisco ≫ Identity Services Engine Version2.4.0 Updatepatch9
Cisco ≫ Identity Services Engine Version2.4.0.357 Update-
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch1
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch10
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch11
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch12
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch2
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch3
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch4
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch5
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch6
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch7
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch8
Cisco ≫ Identity Services Engine Version2.4.0.357 Updatepatch9
Cisco ≫ Identity Services Engine Version2.5(0.1)
Cisco ≫ Identity Services Engine Version2.5(0.225)
Cisco ≫ Identity Services Engine Version2.5(0.353)
Cisco ≫ Identity Services Engine Version2.6(0.156)
Cisco ≫ Identity Services Engine Version002.006(000.156) Update-
Cisco ≫ Identity Services Engine Version2.6(0.999) Update-
Cisco ≫ Identity Services Engine Version2.6.0 Update-
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch1
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch10
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch11
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch12
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch2
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch3
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch4
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch5
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch6
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch7
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch8
Cisco ≫ Identity Services Engine Version2.6.0 Updatepatch9
Cisco ≫ Identity Services Engine Version2.6.0.156 Updatepatch1
Cisco ≫ Identity Services Engine Version2.6.0.156 Updatepatch2
Cisco ≫ Identity Services Engine Version2.6.0.156 Updatepatch3
Cisco ≫ Identity Services Engine Version2.6.0.156 Updatepatch5
Cisco ≫ Identity Services Engine Version2.6.0.156 Updatepatch6
Cisco ≫ Identity Services Engine Version2.6.0.156 Updatepatch7
Cisco ≫ Identity Services Engine Version2.7(0.207)
Cisco ≫ Identity Services Engine Version2.7(0.356)
Cisco ≫ Identity Services Engine Version2.7(0.356) Update-
Cisco ≫ Identity Services Engine Version002.007(000.356) Update-
Cisco ≫ Identity Services Engine Version2.7(0.903)
Cisco ≫ Identity Services Engine Version2.7.0 Update-
Cisco ≫ Identity Services Engine Version2.7.0 Updatepatch1
Cisco ≫ Identity Services Engine Version2.7.0 Updatepatch2
Cisco ≫ Identity Services Engine Version2.7.0 Updatepatch3
Cisco ≫ Identity Services Engine Version2.7.0 Updatepatch4
Cisco ≫ Identity Services Engine Version2.7.0 Updatepatch5
Cisco ≫ Identity Services Engine Version2.7.0 Updatepatch6
Cisco ≫ Identity Services Engine Version2.7.0 Updatepatch7
Cisco ≫ Identity Services Engine Version2.7.0 Updatepatch8
Cisco ≫ Identity Services Engine Version2.7.0 Updatepatch9
Cisco ≫ Identity Services Engine Version2.7.0.356 Updatepatch1
Cisco ≫ Identity Services Engine Version3.0(0.458)
Cisco ≫ Identity Services Engine Version003.000(000.458) Update-
Cisco ≫ Identity Services Engine Version3.0.0 Update-
Cisco ≫ Identity Services Engine Version3.0.0 Updatepatch1
Cisco ≫ Identity Services Engine Version3.0.0 Updatepatch2
Cisco ≫ Identity Services Engine Version3.0.0 Updatepatch3
Cisco ≫ Identity Services Engine Version3.0.0 Updatepatch4
Cisco ≫ Identity Services Engine Version3.0.0 Updatepatch5
Cisco ≫ Identity Services Engine Version3.0.0 Updatepatch6
Cisco ≫ Identity Services Engine Version3.0.0 Updatepatch7
Cisco ≫ Identity Services Engine Version3.1 Update-
Cisco ≫ Identity Services Engine Version3.1 Updatepatch1
Cisco ≫ Identity Services Engine Version3.1 Updatepatch2
Cisco ≫ Identity Services Engine Version3.1 Updatepatch3
Cisco ≫ Identity Services Engine Version3.1 Updatepatch4
Cisco ≫ Identity Services Engine Version3.1 Updatepatch5
Cisco ≫ Identity Services Engine Version3.1 Updatepatch6
Cisco ≫ Identity Services Engine Version3.1 Updatepatch7
Cisco ≫ Identity Services Engine Version3.2 Update-
Cisco ≫ Identity Services Engine Version3.2 Updatepatch1
Cisco ≫ Identity Services Engine Version3.2 Updatepatch2
Cisco ≫ Identity Services Engine Version3.2 Updatepatch3
Cisco ≫ Identity Services Engine Version3.2 Updatepatch4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.07% 0.223
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.4 2.3 2.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
psirt@cisco.com 4.8 1.7 2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.