CVE-2017-6675

CVE-2017-6675 is a cross-site scripting (XSS) vulnerability in the web interface of Cisco Industrial Network Director. The issue comes from insufficient validation of user-supplied input in URLs, allowing an unauthenticated, remote attacker to trigger a reflected XSS in affected systems. Affected...