This vulnerability exists in the REST API of Cisco ISE and Cisco ISE-PIC where specific parameters are not properly validated before being concatenated into SQL statements. An attacker with valid administrative credentials can send crafted requests containing SQL code to perform SQL injection attacks against the monitoring database, potentially exposing sensitive information. The vulnerability affects Cisco ISE versions 3.1.0, 3.2.0, 3.3.0, 3.4.0, and 3.5.0. The CVSS 3.1 base score is 4.9, reflecting a medium severity with high confidentiality impact but no integrity or availability impact.

An attacker with valid administrative credentials can exploit this vulnerability to read sensitive information from the monitoring database via SQL injection. There is no indication of integrity or availability impact. The vulnerability requires authenticated access, limiting the attack surface to authorized users.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict administrative access to trusted personnel only and monitor for suspicious activity related to the REST API. No public exploits are known at this time.