Cross-Site Scripting Vulnerability in Cisco Identity Services Engine

CVE-2023-20208

What is CVE-2023-20208?

A security flaw in the web-based management interface of Cisco Identity Services Engine (ISE) poses a risk that allows an authenticated remote attacker to perform a Cross-Site Scripting (XSS) attack. This vulnerability can be exploited when a user interacts with the compromised web management interface. By leveraging this flaw, the attacker could inject malicious scripts, which, when executed in the context of the victim’s session, could lead to unauthorized actions, data theft, or further compromise of the affected system.

References