CVE-2013-5525

no score yetEPSS 1.3%

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2013-10-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:identity_services_engine_software

References

http://osvdb.org/98167
http://secunia.com/advisories/55098
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5525
http://tools.cisco.com/security/center/viewAlert.x?alertId=31160
http://www.securitytracker.com/id/1029156

Check your stack JSON