CVE-2017-3836

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.5(1.11007.2). Known Fixed Releases: 12.0(0.98000.162) 12.0(0.98000.178) 12.0(0.98000.383) 12.0(0.98000.488) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6).

• CWE-200

• http://www.securityfocus.com/bid/96251
• http://www.securitytracker.com/id/1037840
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm3Vendor Advisory
• http://www.securityfocus.com/bid/96251
• http://www.securitytracker.com/id/1037840
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm3Vendor Advisory

Published

Feb 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3830A vulnerability in an internal API of the Cisco Meeting Serv…
• CVE-2017-3831A vulnerability in the web-based GUI of Cisco Mobility Expre…
• CVE-2017-3832A vulnerability in the web management interface of Cisco Wir…7.5
• CVE-2017-3833A vulnerability in the web framework of Cisco Unified Commun…
• CVE-2017-3834A vulnerability in Cisco Aironet 1830 Series and Cisco Airon…9.8
• CVE-2017-3835A vulnerability in the sponsor portal of Cisco Identity Serv…
• CVE-2017-3837An HTTP Packet Processing vulnerability in the Web Bridge in…
• CVE-2017-3838A vulnerability in Cisco Secure Access Control System (ACS) …
• CVE-2017-3839An XML External Entity vulnerability in the web-based user i…
• CVE-2017-3840A vulnerability in the web interface of the Cisco Secure Acc…
• CVE-2017-3841A vulnerability in the web interface of the Cisco Secure Acc…
• CVE-2017-3842A vulnerability in the web-based management interface of the…