CVE-2023-20208

Summary

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the web-based management interface of an affected device.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco Identity Services Engine Software3.0.0affected
CiscoCisco Identity Services Engine Software3.0.0 p1affected
CiscoCisco Identity Services Engine Software3.0.0 p2affected
CiscoCisco Identity Services Engine Software3.0.0 p3affected
CiscoCisco Identity Services Engine Software3.0.0 p4affected
CiscoCisco Identity Services Engine Software3.0.0 p5affected
CiscoCisco Identity Services Engine Software3.0.0 p6affected
CiscoCisco Identity Services Engine Software3.0.0 p7affected
CiscoCisco Identity Services Engine Software3.1.0affected
CiscoCisco Identity Services Engine Software3.1.0 p1affected
CiscoCisco Identity Services Engine Software3.1.0 p3affected
CiscoCisco Identity Services Engine Software3.1.0 p4affected
CiscoCisco Identity Services Engine Software3.1.0 p5affected

Weaknesses

  • CWE-87: Improper Neutralization of Alternate XSS Syntax

ADP Enrichment

CVE Program Container

Additional References

References