SSD Advisory – Cisco ISE Unauthenticated XSS to Privileged RCE

Vulnerabilities SummaryCisco Identity Services Engine (ISE) contains three vulnerabilities that when exploited allow an unauthenticated attacker to achieve root privileges and execute code remotely. The first is a Stored Cross Site Scripting file upload vulnerability that allows the attacker to upload and execute html pages on victims browser. The second is an already known vulnerability …

SSD Advisory – Cisco ISE Unauthenticated XSS to Privileged RCE Read More »