VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Oct 26, 2022· Updated Jun 17, 2026

CVE-2022-20959

CVE-2022-20959

Description

A vulnerability in the External RESTful Services (ERS) API of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by persuading an authenticated administrator of the web-based management interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

23
  • Cisco Systems, Inc./Identity Services Engine Softwarellm-fuzzy22 versions
    (expand)+ 21 more
    • (no CPE)
    • (no CPE)range: n/a
    • cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*range: >=2.4,<2.7.0
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch4:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch5:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch6:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch7:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch4:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch5:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch6:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*
  • Cisco Systems, Inc./ISEllm-fuzzy

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.