CVE:CVE-2020-3589
CNNVD:CNNVD-202010-230
Cisco Identity Services Engine（ISE）是美国思科（Cisco）公司的一款基于身份的环境感知平台（ISE身份服务引擎）。该平台通过收集网络、用户和设备中的实时信息，制定并实施相应策略来监管网络。
Cisco Identity Services Engine 中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade cisco identity_services_engine to a higher version than 2.2.0:patch16,2.2.0.470:patch1,2.2.0.470:patch10,2.2.0.470:patch11,2.2.0.470:patch12,2.2.0.470:patch13,2.2.0.470:patch14,2.2.0.470:patch15,2.2.0.470:patch16,2.2.0.470:patch2,2.2.0.470:patch3,2.2.0.470:patch4,2.2.0.470:patch5,2.2.0.470:patch6,2.2.0.470:patch7,2.2.0.470:patch8,2.2.0.470:patch9,2.3.0:patch7,2.3.0.298,2.3.0.298:patch1,2.3.0.298:patch2,2.3.0.298:patch3,2.3.0.298:patch4,2.3.0.298:patch5,2.3.0.298:patch6,2.3.0.298:patch7,2.4.0:patch12,2.4.0.357,2.4.0.357:patch1,2.4.0.357:patch10,2.4.0.357:patch2,2.4.0.357:patch3,2.4.0.357:patch4,2.4.0.357:patch5,2.4.0.357:patch6,2.4.0.357:patch7,2.4.0.357:patch8,2.4.0.357:patch9,2.6.0,2.6.0:patch1,2.6.0:patch2,2.6.0:patch3,2.6.0:patch5,2.6.0:patch6,2.6.0:patch7,2.6.0.156:patch1,2.6.0.156:patch2,2.6.0.156:patch3,2.6.0.156:patch5,2.6.0.156:patch6,2.6.0.156:patch7,2.7.0:patch2,and avoid the version 2.2.0:patch16,2.2.0.470:patch1,2.2.0.470:patch10,2.2.0.470:patch11,2.2.0.470:patch12,2.2.0.470:patch13,2.2.0.470:patch14,2.2.0.470:patch15,2.2.0.470:patch16,2.2.0.470:patch2,2.2.0.470:patch3,2.2.0.470:patch4,2.2.0.470:patch5,2.2.0.470:patch6,2.2.0.470:patch7,2.2.0.470:patch8,2.2.0.470:patch9,2.3.0:patch7,2.3.0.298,2.3.0.298:patch1,2.3.0.298:patch2,2.3.0.298:patch3,2.3.0.298:patch4,2.3.0.298:patch5,2.3.0.298:patch6,2.3.0.298:patch7,2.4.0:patch12,2.4.0.357,2.4.0.357:patch1,2.4.0.357:patch10,2.4.0.357:patch2,2.4.0.357:patch3,2.4.0.357:patch4,2.4.0.357:patch5,2.4.0.357:patch6,2.4.0.357:patch7,2.4.0.357:patch8,2.4.0.357:patch9,2.6.0,2.6.0:patch1,2.6.0:patch2,2.6.0:patch3,2.6.0:patch5,2.6.0:patch6,2.6.0:patch7,2.6.0.156:patch1,2.6.0.156:patch2,2.6.0.156:patch3,2.6.0.156:patch5,2.6.0.156:patch6,2.6.0.156:patch7,2.7.0:patch2