CVE-2017-12349

Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting XSS attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs:...

CVE-2017-12349

Cisco UCS Central Software’s web-based management interface contains multiple vulnerabilities (CVE-2017-12349) that could allow a remote attacker to perform cross-site scripting (XSS) or hijack a valid session ID. The CVE description specifies XSS and session hijacking as potential impacts; Cisco...