CVE-2013-5541: Cisco Identity Services Engine

Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename, aka Bug ID CSCui67495.

Affected products

• Cisco Identity Services Engine
• Cisco Identity Services Engine Software: affected versions not specified

Published 2013-10-16. Last modified 2026-06-16.