A vulnerability in Cisco ISE APIs allows an authenticated remote attacker with administrative credentials to perform SQL injection attacks on the backend database. This flaw arises from insufficient validation of parameters concatenated into SQL queries. Exploitation could enable reading arbitrary database content and conducting server-side request forgery (SSRF) attacks.