This vulnerability in Cisco ISE arises from improper neutralization of special elements in SQL commands, enabling SQL injection attacks. An unauthenticated remote attacker can exploit this flaw by sending specially crafted requests to the affected device, leading to unauthorized modification of database data. The CVSS 3.1 base score is 7.5, reflecting a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to integrity.

Successful exploitation allows an unauthenticated remote attacker to modify data in the Cisco ISE underlying database, potentially impacting the integrity of stored information. There is no reported impact on confidentiality or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor Cisco advisories for updates and apply any released fixes promptly.