CVE-2018-0289: A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, rem...

Security readout for executives and security teams

CVE-2018-0289 is a stored cross-site scripting issue in Cisco Identity Services Engine logs. A remote unauthenticated attacker could send malicious requests that are saved in logs, then execute script when an administrator views those logs in the management interface. Organizations running Cisco Identity Services Engine are the only affected population identified in the bundle. Exposure is most relevant where Cisco ISE can receive untrusted requests and administrators routinely inspect logs through the management interface. Handle as a priority maintenance and access-control issue, not an emergency from the available evidence. The risk is meaningful because administrator sessions are involved, but the bundle does not prove active exploitation or critical severity. Mitigation focus: Check Cisco's advisory for affected versions, fixed releases, and supported workarounds.; Apply Cisco-recommended updates or mitigations for confirmed affected Cisco ISE deployments.; Limit Cisco ISE management interface access to trusted administrative networks..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.