CVE-2023-20085

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script in the context of the affected interface or access sensitive, browser-based information.

• CWE-79
• CWE-79

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-ubfHG75CVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-ubfHG75CVendor Advisory

Published

Mar 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2008A flaw was found in the Linux kernel's udmabuf device driver…8.2
• CVE-2023-20080A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay an…7.5
• CVE-2023-20081A vulnerability in the IPv6 DHCP (DHCPv6) client module of C…5.9
• CVE-2023-20082A vulnerability in Cisco IOS XE Software for Cisco Catalyst …6.8
• CVE-2023-20083A vulnerability in ICMPv6 inspection when configured with th…8.6
• CVE-2023-20084A vulnerability in the endpoint software of Cisco Secure End…4.4
• CVE-2023-20086A vulnerability in ICMPv6 processing of Cisco Adaptive Secur…8.6
• CVE-2023-20087Multiple vulnerabilities in the web-based management interfa…6.5
• CVE-2023-20088A vulnerability in the nginx configurations that are provide…7.5
• CVE-2023-20089A vulnerability in the Link Layer Discovery Protocol (LLDP) …6.5
• CVE-2023-2009Plugin does not sanitize and escape the URL field in the Pre…4.8
• CVE-2023-20090A vulnerability in Cisco TelePresence CE and RoomOS could al…6.7