Cisco has issued a security advisory, reporting critical vulnerabilities affecting Cisco Identity Services Engine (ISE), Cisco ISE Passive Identity Connector, Cisco ThousandEyes Enterprise Agent, Cisco Unity Connection, Cisco Webex Contact Center, Cisco AsyncOS Software for Cisco Secure Web Appliance and Cisco Webex Services Appliance. A remote attacker could exploit some of these vulnerabilities to trigger data manipulation, security restriction bypass, remote code execution, cross-site scripting, sensitive information disclosure and elevation of privilege on the targeted system.

Cisco recommends that users follow the recommendations published in the Security Bulletin.

More information is available in the Cisco Security Bulletin - cisco.com.