CVE-2017-3872

Published: Mar 17, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases: 10.5(2.14076.1). Known Fixed Releases: 12.0(0.98000.641) 12.0(0.98000.500) 12.0(0.98000.219).

Affected (4)

Products: Cisco: Unified Communications Manager

Cisco

1 product

Unified Communications Manager

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Communications Manager	Version 10.5(2.10000.5)
Cisco Unified Communications Manager	Version 10.5(2.14076.1)
Cisco Unified Communications Manager	Version 11.0(1.10000.10)
Cisco Unified Communications Manager	Version 11.5(1.10000.6)