Maksim Tsoy

Researcher fromPositive Technologies Research Team
#17291of 60,387
17.9Total CVSS
Vulnerabilities · 3
Medium
3
PT-2012-5069
2012-09-16
6.8
CVE-2012-3908
Cisco
Cisco Identity Services Engine
The issue affects the ISE Administrator user interface, also known as the Apache Tomcat interface, on Cisco Identity Services Engine (ISE) 3300 series appliances. It involves multiple cross-site request forgery (CSRF) vulnerabilities that allow remote attackers to hijack the authentication of administrators.
PT-2012-1684
2012-05-02
6.8
CVE-2011-3293
Cisco
Cisco Secure Access Control Server
The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities in the Solution Engine. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences.
PT-2012-1687
2012-05-02
4.3
CVE-2011-3317
Cisco
Cisco Secure Access Control Server
The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the Solution Engine of Cisco Secure Access Control Server (ACS). These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.