CVE-2017-3829
Last modified
CVE-2017-3829 is a vulnerability of currently unknown severity. A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc30999. EPSS estimates a 1.54% chance of exploitation in the next 30 days.
Description
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc30999. Known Affected Releases: 12.0(0.98000.280). Known Fixed Releases: 11.0(1.23900.3) 12.0(0.98000.180) 12.0(0.98000.422) 12.0(0.98000.541) 12.0(0.98000.6).
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Communications Manager | 11.0\(1.10000.10\) |
| Cisco | Unified Communications Manager | 11.5\(1.10000.6\) |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-3829?
How severe is CVE-2017-3829?
How do I fix CVE-2017-3829?
Are you affected by CVE-2017-3829?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST