PT-2013-5622
CVE-2013-5541
·
Publicado
2013-10-16
·
Atualizado
2013-10-16
Descrição por
CVSS 2.0
3.5
BaixaMétricasAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Cisco Identity Services Engine (ISE) (affected versions not specified)
Description
A cross-site scripting (XSS) issue exists in the file-upload interface, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted filename.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾