NVD

Id
21227  
Name
CVE-2016-6453  
Description
A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. More Information: CSCva46542. Known Affected Releases: 1.3(0.876).  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-11-03  
Modified Date
2016-11-28  
Seq
2016-6453  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
115279 21227 CVE-2016-6453 93897  View
115280 21227 CVE-2016-6453 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ise  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4962 JVNDB-2016-005735 Cisco Identity Services Engine の Web フレームワークのコードにおける SQL インジェクションの脆弱性 Cisco Identity Services Engine (ISE) の Web フレームワークのコードには、データベース上で任意の SQL コマンドを実行される脆弱性が存在します。 CVE-2016-6453 92960 CVE-2016-6453 21227 4.9 7.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005735.html 2016-10-26 2016-11-08 View