CVE-2017-6605

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a reflective cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc85415. Known Affected Releases: 2.1(0.800).

• CWE-79

• http://www.securityfocus.com/bid/99207Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038740Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ise1Vendor Advisory
• http://www.securityfocus.com/bid/99207Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038740Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ise1Vendor Advisory

Published

Jul 4, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6599A vulnerability in Google-defined remote procedure call (gRP…
• CVE-2017-6600A vulnerability in the CLI of the Cisco Unified Computing Sy…
• CVE-2017-6601A vulnerability in the CLI of the Cisco Unified Computing Sy…
• CVE-2017-6602A vulnerability in the CLI of Cisco Unified Computing System…
• CVE-2017-6603A vulnerability in Cisco ASR 903 or ASR 920 Series Devices r…
• CVE-2017-6604A vulnerability in the web interface of Cisco Integrated Man…
• CVE-2017-6606A vulnerability in a startup script of Cisco IOS XE Software…
• CVE-2017-6607A vulnerability in the DNS code of Cisco ASA Software could …
• CVE-2017-6608A vulnerability in the Secure Sockets Layer (SSL) and Transp…
• CVE-2017-6609A vulnerability in the IPsec code of Cisco ASA Software coul…
• CVE-2017-6610A vulnerability in the Internet Key Exchange Version 1 (IKEv…
• CVE-2017-6611A vulnerability in the web framework code of Cisco Prime Inf…