CVE-2017-3835

No fix known EPSS 2%

A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access notices owned by other users, because of SQL Injection. More Information: CSCvb15627. Known Affected Releases: 1.4(0.908).

Published 2017-02-22 · CVE record · OSV

Products: cisco identity_services_engine_software