Cisco Identity Services Engine Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of September 16, 2026, Security Advisories ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-jfxK98ZP"]. In addition, for further documentation of improvements and fixes in Cisco Identity Services Engine, see Cisco Identity Services Engine Security Hardening Release: September 2026 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T"].
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-20309US | medium6.1 | — | ||
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scri… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- Cisco Identity Services Engine Security Hardening Release: September 2026external
- Cisco Identity Services Engine Cross-Site Scripting Vulnerabilityself
- Cisco Advance Notification for Publication of September 16, 2026, Security Advisoriesexternal
- Cisco's Transition to a Risk-Based Vulnerability Disclosure Modelexternal
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- Cisco Support and Downloadsexternal
Behebungen (46)
- Behoben3.1.0
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.1.0 p1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.1.0 p10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.1.0 p11
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.1.0 p2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.1.0 p3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.1.0 p4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.1.0 p5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.1.0 p6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.1.0 p7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.1.0 p8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.1.0 p9
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.2 Patch 10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.2 Patch 8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.2 Patch 9
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.2.0
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.2.0 p1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.2.0 p2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.2.0 p3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.2.0 p4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.2.0 p5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.2.0 p6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.2.0 p7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3 Patch 1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3 Patch 10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3 Patch 11
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3 Patch 2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3 Patch 3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3 Patch 4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3 Patch 5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3 Patch 6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3 Patch 7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3 Patch 8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3 Patch 9
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.3.0
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.4 Patch 1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.4 Patch 2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.4 Patch 3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.4 Patch 4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.4 Patch 5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.4 Patch 6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.4.0
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.5 Patch 1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.5 Patch 2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.5 Patch 3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben3.5.0
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan