CVE-2013-5523

no score yetEPSS 1.2%

cisco identity services engine software: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCui82666.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2013-10-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:identity_services_engine_software

References

http://osvdb.org/98168
http://secunia.com/advisories/55207
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5523
http://tools.cisco.com/security/center/viewAlert.x?alertId=31161
http://www.securityfocus.com/bid/62869

Check your stack JSON