CVE-2017-6734: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software coul...

Security readout for executives and security teams

CVE-2017-6734 is an authenticated cross-site scripting issue in Cisco Identity Services Engine's web management interface, tied to the Guest Portal. An attacker with valid access could target another interface user. The sources do not provide CVSS, confirmed exploitation, or complete fix details in the bundle. Exposure is most likely where Cisco ISE runs affected releases and the web management interface or Guest Portal administration is reachable by authenticated users beyond tightly trusted administrators. Treat as a controlled remediation item, not an emergency, unless affected ISE management is broadly reachable or shared among many administrators. Prioritize confirmation and vendor-guided upgrade planning. Mitigation focus: Review Cisco advisory cisco-sa-20170705-ise2 for vendor fix guidance.; Inventory Cisco ISE versions against 1.3(0.909) and 2.1(0.800).; Apply Cisco-recommended updates or workarounds where applicable..

Prepared

Jun 12, 2026, 22:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.