CVE-2017-3845

2017-02-2202:00:00

cisco

www.cve.org

0.002 Low

EPSS

Percentile

62.1%

JSON

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are vulnerable. Cisco Prime Collaboration Assurance software versions prior to 11.0 are not vulnerable. More Information: CSCvc77783. Known Affected Releases: 11.5(0).

CNA Affected

[
  {
    "product": "Cisco Prime Collaboration Assurance",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Prime Collaboration Assurance"
      }
    ]
  }
]