CVE-2013-5525

CVE Database · CVE-2013-5525

CVE-2013-5525

· N/AModified

CVSS v3.1

N/A

EPSS

1.32%

Published

Oct 10, 2013

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.

Weaknesses (CWE)

CWE-89

Affected Products (3)

cisco · identity_services_engine_softwarevulnerable

References (12)

http://osvdb.org/98167

http://secunia.com/advisories/55098

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5525

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=31160

Vendor Advisory

http://www.securitytracker.com/id/1029156

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/87723

http://osvdb.org/98167

http://secunia.com/advisories/55098

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5525

KEV Catalog EPSS Scores Vendors All CVEs