CVE-2017-12349 Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected...
MediumCVSS 5.4
EPSS 0.89%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs: CSCvf71978, CSCvf71986.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified computing system central software | = 2.2(1a)a | No fix listed |
References
- 102018 third-party-advisory vdb-entry
- 1039924 third-party-advisory vdb-entry
- tools.cisco.com vendor-advisory