CyberRota Analysis
AI-GeneratedCisco Identity Services Engine (ISE) is vulnerable to SQL injection attacks, which can be exploited by authenticated remote attackers with low-privileged administrative credentials. This flaw arises from inadequate validation of user-supplied input, potentially allowing attackers to read or modify sensitive data in the database. Organizations using Cisco ISE should prioritize remediation to mitigate the risk of data compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative credentials. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to read or modify data in the underlying database.