CVE-2017-6675

A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against an affected system. More Information: CSCvd25405. Known Affected Releases: 1.10.176...

CVE-2017-6675

CVE-2017-6675 is a cross-site scripting (XSS) vulnerability in the web interface of Cisco Industrial Network Director. The issue comes from insufficient validation of user-supplied input in URLs, allowing an unauthenticated, remote attacker to trigger a reflected XSS in affected systems. Affected...