THREATOPS
THREAT OPSThreat News › [NVD] CVE-2024-20479 (MEDIUM 4.8) — A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management in

[NVD] CVE-2024-20479 (MEDIUM 4.8) — A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management in

lownvdPublished 2024-08-07

CVE-2024-20479 CVSS: 4.8 MEDIUM Published: 2024-08-07T17:15:50.930

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface.

This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exp

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-20479