CVE-2017-6734

Published: Jul 10, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected device, related to the Guest Portal. More Information: CSCvd74794. Known Affected Releases: 1.3(0.909) 2.1(0.800).

Affected (9)

Products: Cisco: Identity Services Engine

Cisco

1 product

Identity Services Engine

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Cisco Identity Services Engine	Version 1.3(0.722)
Cisco Identity Services Engine	Version 1.3(0.876)
Cisco Identity Services Engine	Version 1.3(0.909)
Cisco Identity Services Engine	Version 1.3(106.146)
Cisco Identity Services Engine	Version 1.3(120.135)
Cisco Identity Services Engine	Version 2.1(0.474)
Cisco Identity Services Engine	Version 2.1(0.800)
Cisco Identity Services Engine	Version 2.1(102.101)
Cisco Identity Services Engine	Version 2.1_base