CVE-2017-12307
Severity
6.1MEDIUM
EPSS
0.2%
top 59.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 18
Latest updateMay 13
Description
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting and inj…
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7
Affected Packages86 packages
▶CVEListV5cisco_small_business_300_and_500_series_managed_switchesCisco Small Business 300 and 500 Series Managed Switches
🔴Vulnerability Details
2GHSA▶
GHSA-m32m-2q87-9hp4: A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a re↗2022-05-13
CVEList▶
CVE-2017-12307: A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a re↗2018-01-18
📋Vendor Advisories
1Cisco▶
Cisco Small Business 300 and 500 Series Managed Switches Cross-Site Scripting Vulnerability↗2018-01-18