Not rated
CVE-2017-3888 A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an…
Description
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability affects Cisco Unified Communications Manager with a default configuration running an affected software release with the attacker authenticated as the administrative user. More Information: CSCvc83712. Known Affected Releases: 12.0(0.98000.452). Known Fixed Releases: 12.0(0.98000.750) 12.0(0.98000.708) 12.0(0.98000.707) 12.0(0.98000.704) 12.0(0.98000.554) 12.0(0.98000.546) 12.0(0.98000.543) 12.0(0.98000.248) 12.0(0.98000.244) 12.0(0.98000.242).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Unified Communications Manager | Versions not published |
References
- 1038193 www.securitytracker.com
- 97431 www.securityfocus.com
- tools.cisco.com tools.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Unified Communications Manager
The 28 CVEs of Cisco Unified Communications Manager →
CVE-2018-0267
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local…
Not rated
CVE-2018-0266
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote…
Not rated
CVE-2018-0198
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote…
Not rated
CVE-2018-0206
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an…
Not rated