Not rated
CVE-2017-3874 A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated,…
Description
A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS) attack. More Information: CSCvb70033. Known Affected Releases: 11.5(1.11007.2). Known Fixed Releases: 12.0(0.98000.507) 11.0(1.23900.5) 11.0(1.23900.3) 10.5(2.15900.2).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Unified Communications Manager | Versions not published |
References
- 96914 www.securityfocus.com
- 1038037 www.securitytracker.com
- tools.cisco.com tools.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Unified Communications Manager
The 28 CVEs of Cisco Unified Communications Manager →
CVE-2018-0267
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local…
Not rated
CVE-2018-0266
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote…
Not rated
CVE-2018-0198
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote…
Not rated
CVE-2018-0206
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an…
Not rated