CVE-2017-12343

2017-11-3009:00:00

CWE-79

cisco

www.cve.org

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.1%

JSON

Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247.

CNA Affected

[
  {
    "product": "Cisco Data Center Network Manager Software",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Data Center Network Manager Software"
      }
    ]
  }
]