CVE-2017-6605: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow a...

Security readout for executives and security teams

Cisco ISE had a web management interface flaw that could let an authenticated remote user trigger reflected cross-site scripting against another console user. For executives, the main risk is abuse of a sensitive identity-management admin interface, but the provided sources do not show public exploitation or a CVSS score. Exposure is most likely where Cisco ISE is deployed and the web-based management interface is reachable by authenticated users. The only specific affected release stated in the bundle is 2.1(0.800); broader version impact is not evidenced here. Treat as a moderate-priority legacy Cisco ISE issue. Address confirmed affected deployments during security maintenance, faster if the management interface is broadly reachable or many users have access. Mitigation focus: Review the Cisco advisory for fixed releases and vendor-specific remediation guidance.; Prioritize upgrades for any Cisco ISE 2.1(0.800) deployments.; Restrict management interface access to trusted administrative networks and users..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.