CVE-2017-6756

A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of defense against cross-site request forgery (CSRF) attacks. An attacker could exploit this vulnerability by forcing the user's browser to perform any action authorized for that user. Cisco Bug IDs: CSCvc90280.

• CWE-352
• CWE-352

• http://www.securityfocus.com/bid/100112Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039061Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcpt1Vendor Advisory
• http://www.securityfocus.com/bid/100112Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039061Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcpt1Vendor Advisory

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6750A vulnerability in AsyncOS for the Cisco Web Security Applia…
• CVE-2017-6751A vulnerability in the web proxy functionality of the Cisco …7.5
• CVE-2017-6752A vulnerability in the web interface of the Cisco Adaptive S…
• CVE-2017-6753A vulnerability in Cisco WebEx browser extensions for Google…
• CVE-2017-6754A vulnerability in the web-based management interface of the…
• CVE-2017-6755A vulnerability in the web portal of the Cisco Prime Collabo…
• CVE-2017-6757A vulnerability in Cisco Unified Communications Manager 10.5…
• CVE-2017-6758A vulnerability in the web framework of Cisco Unified Commun…
• CVE-2017-6759A vulnerability in the UpgradeManager of the Cisco Prime Col…
• CVE-2017-6761A vulnerability in the web-based management interface of Cis…
• CVE-2017-6762A vulnerability in the web-based management interface of Cis…
• CVE-2017-6763A vulnerability in the implementation of the H.264 protocol …