CVE-2017-12357

🗓️ 30 Nov 2017 09:00:00Reported by ciscoType

A vulnerability in the web-based management interface of Cisco Unified Communications Manager allows authenticated remote attackers to conduct cross-site scripting (XSS) attacks

Reporter	Title	Published	Views	Family All 6
Cisco	Cisco Unified Communications Manager Cross-Site Scripting Vulnerability	29 Nov 201716:00	–	cisco
CNVD	Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-36401)	4 Dec 201700:00	–	cnvd
Cvelist	CVE-2017-12357	30 Nov 201709:00	–	cvelist
EUVD	EUVD-2017-3930	7 Oct 202500:30	–	euvd
NVD	CVE-2017-12357	30 Nov 201709:29	–	nvd
Prion	Cross site scripting	30 Nov 201709:29	–	prion

NVD

Node

cisco unified_communications_managerMatch10.5(2.10000.5)

cisco unified_communications_managerMatch11.0(1.10000.10)

cisco unified_communications_managerMatch11.5(1.10000.6)

cisco unified_communications_managerMatch12.0(1.10000.10)

[
  {
    "product": "Cisco Unified Communications Manager",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Unified Communications Manager"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/101988
securitytracker	www.securitytracker.com/id/1039916
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-cucm

13 May 2026 00:24Current

5.2Medium risk

Vulners AI Score5.2

CVSS 23.5

CVSS 35.4

EPSS0.00235

CWE-79