CVE-2019-1719

A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input that is processed by the web-based interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information. Cisco ISE software version 2.1 is affected.

• CWE-79
• CWE-79

• http://www.securityfocus.com/bid/107993Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-ise-xssVendor Advisory
• http://www.securityfocus.com/bid/107993Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-ise-xssVendor Advisory

Published

Apr 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17184Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C80…9.8
• CVE-2019-17185In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a…7.5
• CVE-2019-17186/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5…8.8
• CVE-2019-17187/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1…7.5
• CVE-2019-17188An unrestricted file upload vulnerability was discovered in …7.2
• CVE-2019-17189totemodata 3.0.0_b936 has XSS via a folder name.5.4
• CVE-2019-17190A Local Privilege Escalation issue was discovered in Avast S…7.8
• CVE-2019-17191The Signal Private Messenger application before 4.47.7 for A…7.5
• CVE-2019-17192The WebRTC component in the Signal Private Messenger applica…9.8
• CVE-2019-17195Connect2id Nimbus JOSE+JWT before v7.9 can throw various unc…9.8
• CVE-2019-17197OpenEMR through 5.0.2 has SQL Injection in the Lifestyle dem…9.8
• CVE-2019-17199www/getfile.php in WPO WebPageTest 19.04 on Windows allows D…7.5