VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jan 20, 2023· Updated Jun 17, 2026

CVE-2022-20966

CVE-2022-20966

Description

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attacks against other users of the application web-based management interface. This vulnerability is due to improper validation of input to an application feature before storage within the web-based management interface. An attacker could exploit this vulnerability by creating entries within the application interface that contain malicious HTML or script code. A successful exploit could allow the attacker to store malicious HTML or script code within the application interface for use in further cross-site scripting attacks. Cisco has not yet released software updates that address this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

35
  • Cisco Systems, Inc./Identity Services Engine Software34 versions
    cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*+ 33 more
    • cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*range: <2.6.0
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch10:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch11:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch12:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch5:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch6:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch7:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch8:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch9:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch4:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch5:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch6:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch7:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch4:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch5:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch6:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.1:patch4:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*
    • (no CPE)range: 2.6.0
  • Cisco Systems, Inc./Identity Services Engine Expressllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.