CVE-2018-15455

A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of requests stored in the system's logging database. An attacker could exploit this vulnerability by sending malicious requests to the targeted system. An exploit could allow the attacker to conduct cross-site scripting attacks when an administrator views the logs in the Admin Portal.

• CWE-79
• CWE-79

• http://www.securityfocus.com/bid/106708Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-isel-xssVendor Advisory
• http://www.securityfocus.com/bid/106708Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-isel-xssVendor Advisory

Published

Jan 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1545IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1…7.5
• CVE-2018-15450A vulnerability in the web-based UI of Cisco Prime Collabora…6.5
• CVE-2018-15451A vulnerability in the web-based management interface of Cis…5.4
• CVE-2018-15452A vulnerability in the DLL loading component of Cisco Advanc…5.5
• CVE-2018-15453A vulnerability in the Secure/Multipurpose Internet Mail Ext…8.6
• CVE-2018-15454A vulnerability in the Session Initiation Protocol (SIP) ins…8.6
• CVE-2018-15456A vulnerability in the Admin Portal of Cisco Identity Servic…4.3
• CVE-2018-15457A vulnerability in the web-based management interface of Cis…6.1
• CVE-2018-15458A vulnerability in the Shell Access Filter feature of Cisco …5.3
• CVE-2018-15459A vulnerability in the administrative web interface of Cisco…6.5
• CVE-2018-1546IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote…5.9
• CVE-2018-15460A vulnerability in the email message filtering feature of Ci…8.6