Cisco Identity Services Engine (ISE) contains a flaw in the sponsor portal. The issue is due to the program failing to properly sanitize HTML iframes. This may allow a remote attacker to spoof cross-domain content.
Loss of Integrity
OSVDB is not currently aware of a solution for this vulnerability.