Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2017-6734

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected device, related to the Guest Portal. More Information: CSCvd74794. Known Affected Releases: 1.3(0.909) 2.1(0.800).

  • Published: Jul 10, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-6734
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
cisco / identity_services_engine 1.3(120.135) 1.3(120.135).x
cisco / identity_services_engine 2.1(102.101) 2.1(102.101).x
cisco / identity_services_engine 2.1(0.800) 2.1(0.800).x
cisco / identity_services_engine 2.1(0.474) 2.1(0.474).x
cisco / identity_services_engine 1.3(106.146) 1.3(106.146).x
cisco / identity_services_engine 1.3(0.876) 1.3(0.876).x
cisco / identity_services_engine 1.3(0.722) 1.3(0.722).x
cisco / identity_services_engine 1.3(0.909) 1.3(0.909).x
cisco / identity_services_engine 2.1_base 2.1_base.x