CVE-2013-5530

The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1 before 1.1.1.268-7, 1.1.2 before 1.1.2.145-10, 1.1.3 before 1.1.3.124-7, 1.1.4 before 1.1.4.218-7, and 1.2 before 1.2.0.899-2 allows remote authenticated users to execute arbitrary commands via a crafted session on TCP port 443, aka Bug ID CSCuh81511.

• CWE-78

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-iseVendor Advisory
• http://www.kb.cert.org/vuls/id/952422Third Party Advisory, US Government Resource
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-iseVendor Advisory
• http://www.kb.cert.org/vuls/id/952422Third Party Advisory, US Government Resource

Published

Oct 25, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5524Cross-site scripting (XSS) vulnerability in the troubleshoot…
• CVE-2013-5525SQL injection vulnerability in the web framework in Cisco Id…
• CVE-2013-5526Cisco 9900 fourth-generation IP phones do not properly perfo…
• CVE-2013-5527The OSPF functionality in Cisco IOS and IOS XE allows remote…
• CVE-2013-5528Directory traversal vulnerability in the Tomcat administrati…
• CVE-2013-5529The deployment module in the server in Cisco WebEx Meeting C…
• CVE-2013-5531Cisco Identity Services Engine (ISE) 1.x before 1.1.1 allows…
• CVE-2013-5532Buffer overflow in the web-application interface on Cisco 99…
• CVE-2013-5533The image-upgrade functionality on Cisco 9900 Unified IP pho…
• CVE-2013-5534Directory traversal vulnerability in the attachment service …
• CVE-2013-5535The analytics page on Cisco Video Surveillance 4000 IP camer…
• CVE-2013-5536Cisco Secure Access Control System (ACS) does not properly i…