CVE-2013-5539

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-16 · updated 2026-06-16
Weakness: CWE-20

Description

The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload files with an arbitrary file type, and consequently conduct attacks against unspecified other systems, via a crafted file, aka Bug ID CSCui67511.

Affected products

Cisco Identity Services Engine: all versions
Cisco Identity Services Engine unknown: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5539
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5539

Get alerted when CVE-2013-5539 or the next vulnerability affects your stack