CVE-2013-5505

medium

Description

Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30275.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/87530

http://www.securitytracker.com/id/1029111

http://www.securityfocus.com/bid/62693

http://tools.cisco.com/security/center/viewAlert.x?alertId=31008

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5505

http://secunia.com/advisories/54626

http://osvdb.org/97875

Details

Source: Mitre, NVD

Published: 2013-09-30

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N