A reflected cross-site scripting (XSS) vulnerability exists in the web-based management interface of Cisco Identity Services Engine (ISE). This flaw allows an unauthenticated, remote attacker to execute arbitrary script code in the context of the interface by tricking a user into clicking a crafted link. The vulnerability arises from improper validation of user-supplied input. Exploitation could lead to access to sensitive browser-based information. The vulnerability has a CVSS score of 6.1, indicating medium severity.