Test ID:	1.3.6.1.4.1.25623.1.0.107070
Category:	CISCO
Title:	Cisco Identity Services Engine SQL Injection Vulnerability
Summary:	A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database.
Description:	Summary: A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. Vulnerability Insight: An exploit could allow the attacker to determine the presence of certain values in the database. Vulnerability Impact: The vulnerability is due to insufficient controls on Structured Query Language (SQL) statements. Solution: Cisco has released software updates that address this vulnerability CVSS Score: 4.9 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6453 BugTraq ID: 93897 http://www.securityfocus.com/bid/93897 http://www.securitytracker.com/id/1037109
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.