CVE-2017-3828

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvb98777. Known Affected Releases: 11.0(1.10000.10) 11.5(1.10000.6). Known Fixed Releases: 11.0(1.23063.1) 11.5(1.12029.1) 11.5(1.12900.11) 11.5(1.12900.21) 11.6(1.10000.4) 12.0(0.98000.156) 12.0(0.98000.178) 12.0(0.98000.369) 12.0(0.98000.470) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6).

• CWE-79

• http://www.securityfocus.com/bid/96240
• http://www.securitytracker.com/id/1037839
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm1Vendor Advisory
• http://www.securityfocus.com/bid/96240
• http://www.securitytracker.com/id/1037839
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm1Vendor Advisory

Published

Feb 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3822A vulnerability in the logging subsystem of the Cisco Firepo…5.3
• CVE-2017-3823An issue was discovered in the Cisco WebEx Extension before …
• CVE-2017-3824A vulnerability in the handling of list headers in Cisco cBR…
• CVE-2017-3825A vulnerability in the ICMP ingress packet processing of Cis…
• CVE-2017-3826A vulnerability in the Stream Control Transmission Protocol …
• CVE-2017-3827A vulnerability in the Multipurpose Internet Mail Extensions…
• CVE-2017-3829A vulnerability in the web-based management interface of Cis…
• CVE-2017-3830A vulnerability in an internal API of the Cisco Meeting Serv…
• CVE-2017-3831A vulnerability in the web-based GUI of Cisco Mobility Expre…
• CVE-2017-3832A vulnerability in the web management interface of Cisco Wir…7.5
• CVE-2017-3833A vulnerability in the web framework of Cisco Unified Commun…
• CVE-2017-3834A vulnerability in Cisco Aironet 1830 Series and Cisco Airon…9.8