CVE-2017-6725 — Cross-site Scripting in Cisco Prime Infrastructure

CWE-79 — Cross-site Scripting4 documents4 sources

Severity

6.1MEDIUMNVD

EPSS

0.3%

top 42.51%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Prime Infrastructure Cisco Prime Infrastructure

Timeline

PublishedJul 4

Latest updateMay 17

Description

A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65833 CSCuw65837. Known Affected Releases: 2.2(2).

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶NVDcisco/prime_infrastructure2.2\(2\)

▶CVEListV5cisco/cisco_prime_infrastructureCisco Prime Infrastructure

🔴Vulnerability Details

GHSA

GHSA-h2jx-f86w-hchv: A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site script↗2022-05-17

▶

CVEList

CVE-2017-6725: A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site script↗2017-07-04

▶

📋Vendor Advisories

Cisco

Cisco Prime Infrastructure Web Framework Code Cross-Site Scripting Vulnerabilities↗2017-06-21

▶