CVE-2021-40121

Опубликовано: 21 окт. 2021

Источник: nvd

CVSS3: 6.1

CVSS3: 4.8

CVSS2: 3.5

EPSS Низкий

Описание

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*

Версия до 2.6 (включая)

cpe:2.3:a:cisco:identity_services_engine:2.6\(0.156\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.6\(0.999\):-:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.6.0:-:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch1:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch2:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch3:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch5:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch6:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch7:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch8:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch9:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.7:*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.7\(0.207\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.7\(0.356\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.7\(0.356\):-:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.7\(0.903\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.7.0:-:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch1:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch2:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch3:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch4:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:3.0\(0.458\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:3.0.0:-:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch1:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch2:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00274

Низкий

6.1 Medium

CVSS3

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-x2xf-qg7j-8h8x

github

больше 3 лет назад

BDU:2021-05806

CVSS3: 6.1

fstec

больше 4 лет назад

Уязвимость веб-интерфейса платформы управления политиками соединений Cisco Identity Services Engine, позволяющая нарушителю провести атаку межсайтового скриптинга

EPSS

Процентиль: 50%

0.00274

Низкий

6.1 Medium

CVSS3

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79