CVE-2017-6769 A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attac...
MediumCVSS 5.4
EPSS 0.89%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCve70587. Known Affected Releases: 5.8(0.8) 5.8(1.5).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure access control system | = 5.8(0.8) | No fix listed |
| cisco secure access control system | = 5.8(1.5) | No fix listed |
References
- 99985 third-party-advisory vdb-entry
- 1038996 third-party-advisory vdb-entry
- tools.cisco.com vendor-advisory