CVE-2017-6769

CWE-79 — Cross-site Scripting (XSS)4 documents4 sources
Severity
5.4MEDIUM
EPSS
0.2%
top 53.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Secure Access Control System
Timeline
PublishedAug 7
Latest updateMay 17

Description

A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCve70587. Known Affected Releases: 5.8(0.8) 5.8(1.5).

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages2 packages

▶NVDcisco/secure_access_control_system5.8\(0.8\), 5.8\(1.5\)+1
▶CVEListV5cisco_access_control_systemCisco Access Control System

🔴Vulnerability Details

2
GHSA
GHSA-83w2-4g7q-8w4j: A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to↗2022-05-17
▶
CVEList
CVE-2017-6769: A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to↗2017-08-07
▶

📋Vendor Advisories

1
Cisco
Cisco Access Control System Stored Cross-Site Scripting Vulnerability↗2017-07-26
▶
CVE-2017-6769 (MEDIUM CVSS 5.4) | A vulnerability in the web-based ma | cvebase.io