Threats tagged 'ghsa-97fq-qprm-p8vj'

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in the web-based management interface of Cisco ISE and Cisco ISE-PIC. These flaws allow an authenticated remote attacker with at least low privileges to inject malicious scripts into interface pages, potentially executing arbitrary code in the context of the interface or accessing sensitive browser information. The vulnerabilities stem from insufficient validation of user-supplied input. The overall severity is medium with a CVSS score of 4.8.