CVE-2013-5538: Cisco Identity Services Engine

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506.

Affected products

• Cisco Identity Services Engine
• Cisco Identity Services Engine Software: affected versions not specified

Published 2013-10-16. Last modified 2026-06-16.