CVE-2017-6699

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc24616 CSCvc35363 CSCvc49574. Known Affected Releases: 3.1(1) 2.0(4.0.45B).

• CWE-79

• http://www.securityfocus.com/bid/99221Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038751Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm3Vendor Advisory
• http://www.securityfocus.com/bid/99221Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038751Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm3Vendor Advisory

Published

Jul 4, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6693A vulnerability in the ConfD server component of Cisco Elast…
• CVE-2017-6694A vulnerability in the Virtual Network Function Manager's (V…
• CVE-2017-6695A vulnerability in the ConfD server in Cisco Ultra Services …
• CVE-2017-6696A vulnerability in the file system of Cisco Elastic Services…
• CVE-2017-6697A vulnerability in the web interface of Cisco Elastic Servic…
• CVE-2017-6698A vulnerability in the Cisco Prime Infrastructure (PI) and E…
• CVE-2017-6700A vulnerability in the web-based management interface of Cis…
• CVE-2017-6701A vulnerability in the web application interface of the Cisc…
• CVE-2017-6702A vulnerability in the web framework of Cisco SocialMiner co…
• CVE-2017-6703A vulnerability in the web application in the Cisco Prime Co…
• CVE-2017-6704A vulnerability in the web application in the Cisco Prime Co…
• CVE-2017-6705A vulnerability in the filesystem of the Cisco Prime Collabo…