CVE-2017-3848

A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCuw63001 CSCuw63003. Known Affected Releases: 2.2(2). Known Fixed Releases: 3.1(0.0).

• CWE-79

• http://www.securityfocus.com/bid/96505Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037947
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170301-cpiVendor Advisory
• http://www.securityfocus.com/bid/96505Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037947
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170301-cpiVendor Advisory

Published

Apr 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3842A vulnerability in the web-based management interface of the…
• CVE-2017-3843A vulnerability in the file download functions for Cisco Pri…
• CVE-2017-3844A vulnerability in exporting functions of the user interface…
• CVE-2017-3845A vulnerability in the web-based management interface of Cis…
• CVE-2017-3846A vulnerability in the Client Manager Server of Cisco Worklo…
• CVE-2017-3847A vulnerability in the web framework of Cisco Firepower Mana…
• CVE-2017-3849A vulnerability in the Autonomic Networking Infrastructure (…
• CVE-2017-3850A vulnerability in the Autonomic Networking Infrastructure (…
• CVE-2017-3851A Directory Traversal vulnerability in the web framework cod…
• CVE-2017-3852A vulnerability in the Cisco application-hosting framework (…
• CVE-2017-3853A vulnerability in the Data-in-Motion (DMo) process installe…
• CVE-2017-3854A vulnerability in the mesh code of Cisco Wireless LAN Contr…8.8