CVE-2020-3340

CVE-2020-3340 describes multiple cross-site scripting (XSS) vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE). These flaws stem from insufficient input validation, allowing an authenticated, remote attacker with administrative credentials to inject malicious code into specific interface pages. The vulnerability has a CVSS score of 4.8 (Medium), indicating a network-based attack with low complexity, requiring high privileges and user interaction, potentially leading to limited impact on confidentiality and integrity. While the EPSS score is low and there is no evidence of active exploitation, public exploit code, or significant community discussion, organizations should still address this vulnerability to mitigate potential risks.