CVE-2017-3845

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are vulnerable. Cisco Prime Collaboration Assurance software versions prior to 11.0 are not vulnerable. More Information: CSCvc77783. Known Affected Releases: 11.5(0).

• CWE-79

• http://www.securityfocus.com/bid/96245
• http://www.securitytracker.com/id/1037844
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-pcp3Vendor Advisory
• http://www.securityfocus.com/bid/96245
• http://www.securitytracker.com/id/1037844
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-pcp3Vendor Advisory

Published

Feb 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3839An XML External Entity vulnerability in the web-based user i…
• CVE-2017-3840A vulnerability in the web interface of the Cisco Secure Acc…
• CVE-2017-3841A vulnerability in the web interface of the Cisco Secure Acc…
• CVE-2017-3842A vulnerability in the web-based management interface of the…
• CVE-2017-3843A vulnerability in the file download functions for Cisco Pri…
• CVE-2017-3844A vulnerability in exporting functions of the user interface…
• CVE-2017-3846A vulnerability in the Client Manager Server of Cisco Worklo…
• CVE-2017-3847A vulnerability in the web framework of Cisco Firepower Mana…
• CVE-2017-3848A vulnerability in the HTTP web-based management interface o…
• CVE-2017-3849A vulnerability in the Autonomic Networking Infrastructure (…
• CVE-2017-3850A vulnerability in the Autonomic Networking Infrastructure (…
• CVE-2017-3851A Directory Traversal vulnerability in the web framework cod…