CVE-2017-12343: XSS
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12343?
CVE-2017-12343 has a high severity rating due to its potential for remote code execution and information disclosure.
How do I fix CVE-2017-12343?
To fix CVE-2017-12343, upgrade your Cisco Data Center Network Manager to the latest version that addresses this vulnerability.
Which versions of Cisco Data Center Network Manager are affected by CVE-2017-12343?
Cisco Data Center Network Manager version 10.3(1)S3 is affected by CVE-2017-12343.
What types of attacks can CVE-2017-12343 enable?
CVE-2017-12343 can enable remote attackers to inject arbitrary values, redirect users, and conduct cross-site scripting attacks.
Is user interaction required to exploit CVE-2017-12343?
User interaction is often required to successfully exploit CVE-2017-12343, particularly in cases of phishing or redirection.