CVE-2017-3833

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases: 12.0(0.99999.2). Known Fixed Releases: 11.0(1.23064.1) 11.5(1.12031.1) 11.5(1.12900.21) 11.5(1.12900.7) 11.5(1.12900.8) 11.6(1.10000.4) 12.0(0.98000.155) 12.0(0.98000.178) 12.0(0.98000.366) 12.0(0.98000.367) 12.0(0.98000.468) 12.0(0.98000.469) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6).

• CWE-79

• http://www.securityfocus.com/bid/96246
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ucmVendor Advisory
• http://www.securityfocus.com/bid/96246
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ucmVendor Advisory

Published

Feb 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3827A vulnerability in the Multipurpose Internet Mail Extensions…
• CVE-2017-3828A vulnerability in the web-based management interface of Cis…
• CVE-2017-3829A vulnerability in the web-based management interface of Cis…
• CVE-2017-3830A vulnerability in an internal API of the Cisco Meeting Serv…
• CVE-2017-3831A vulnerability in the web-based GUI of Cisco Mobility Expre…
• CVE-2017-3832A vulnerability in the web management interface of Cisco Wir…7.5
• CVE-2017-3834A vulnerability in Cisco Aironet 1830 Series and Cisco Airon…9.8
• CVE-2017-3835A vulnerability in the sponsor portal of Cisco Identity Serv…
• CVE-2017-3836A vulnerability in the web framework Cisco Unified Communica…
• CVE-2017-3837An HTTP Packet Processing vulnerability in the Web Bridge in…
• CVE-2017-3838A vulnerability in Cisco Secure Access Control System (ACS) …
• CVE-2017-3839An XML External Entity vulnerability in the web-based user i…