Threats tagged 'ghsa-mvgf-2h8p-jh4x'

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in the web-based management interface of Cisco ISE and Cisco ISE-PIC. These flaws allow an authenticated remote attacker with low privileges to inject malicious scripts into interface pages, potentially executing arbitrary code in the context of the interface or accessing sensitive browser information. Exploitation requires at least a low-privileged account on the affected system.