CVE-2016-1485: Cisco Identity Services Engine Software

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497.

Affected products

• Cisco Identity Services Engine Software: version 1.3(0.876) only

Published 2016-08-22. Last modified 2026-06-17.