CVE-2016-1485

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine version 1.3(0.876)

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via crafted parameters.

Recommendations For Cisco Identity Services Engine version 1.3(0.876), update to a version that fixes this issue, as the current version allows for the injection of malicious scripts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.