CVE-2017-6733: A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal c...

Security readout for executives and security teams

Cisco ISE had a portal flaw that could let an unauthenticated remote attacker store malicious script for later execution in a user’s browser. The business risk is compromise of web-session trust, especially if administrators or privileged users view the affected interface. Likely exposure is limited to organizations running affected Cisco ISE portal releases, especially where the web interface is reachable by untrusted users or networks. The bundle does not identify other Cisco products or broader platform impact. Treat this as a targeted remediation item for Cisco ISE environments, not a broad emergency based on the provided evidence. Prioritize internet- or partner-reachable portals and environments where ISE administrators use the affected web interface. Mitigation focus: Review Cisco advisory cisco-sa-20170705-ise1 and follow its vendor-supported remediation guidance.; Identify and prioritize Cisco ISE releases 2.1(102.101), 2.2(0.283), and 2.3(0.151).; Restrict Cisco ISE portal access to trusted networks while remediation is planned..

Prepared

Jun 12, 2026, 22:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.