CVE-2017-3798

A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases: 11.0(1.10000.10) 11.5(1.10000.6). Known Fixed Releases: 11.5(1.12029.1) 11.5(1.12900.11) 12.0(0.98000.369) 12.0(0.98000.370) 12.0(0.98000.398) 12.0(0.98000.457).

• CWE-79

• http://www.securityfocus.com/bid/95872
• http://www.securitytracker.com/id/1037653
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cucmVendor Advisory
• http://www.securityfocus.com/bid/95872
• http://www.securitytracker.com/id/1037653
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cucmVendor Advisory

Published

Jan 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3792A vulnerability in a proprietary device driver in the kernel…
• CVE-2017-3793A vulnerability in the TCP normalizer of Cisco Adaptive Secu…
• CVE-2017-3794A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2017-3795A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2017-3796A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2017-3797A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2017-3799A vulnerability in a URL parameter of Cisco WebEx Meeting Ce…
• CVE-2017-3800A vulnerability in the content scanning engine of Cisco Asyn…
• CVE-2017-3801A vulnerability in the web-based GUI of Cisco UCS Director 6…
• CVE-2017-3802A vulnerability in Cisco Unified Communications Manager coul…
• CVE-2017-3803A vulnerability in the Cisco IOS Software forwarding queue o…
• CVE-2017-3804A vulnerability in Intermediate System-to-Intermediate Syste…