CVE-2017-3868 A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-bas...
MediumCVSS 6.1
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc44344. Known Affected Releases: 6.0(0.0).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified computing system director | = 6.0(0.0) | No fix listed |
References
- 96921 third-party-advisory vdb-entry
- 1038039 vdb-entry
- tools.cisco.com vendor-advisory