CVE-2024-20538

Summary

CVE-2024-20538 is a newly disclosed vulnerability affecting the web-based management interface of Cisco ISE. This issue enables unauthenticated, remote attackers to execute Cross-Site Scripting (XSS) attacks against users of the interface. The vulnerability stems from insufficient input validation by the interface. An attacker could exploit this weakness by crafting malicious links that, if clicked by an interface user, would allow the attacker to execute arbitrary script code or access sensitive data within the affected interface.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.