CVE-2017-3847

published 2017-02-22

CVE-2017-3847: A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)…

medium 5.4 CVSS 3.0

AV N AC L PR L UI R S C C L I L A N

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. More Information: CSCvc72741. Known Affected Releases: 6.2.1.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cisco	firepower_management_center_web_framework	—	—
cisco	secure_firewall_management_center	—	—

CWE-79