CVE-2017-6717: XSS

Published Jul 4, 2017

Updated

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. More Information: CSCvc38801. Known Affected Releases: 6.0.1.3 6.2.1. Known Fixed Releases: 6.2.1.

Affected Software

44 affected components

Cisco Secure Firewall Management Center=5.4.0

Cisco Secure Firewall Management Center=5.4.0.2

Cisco Secure Firewall Management Center=5.4.1

Cisco Secure Firewall Management Center=5.4.1.1

Cisco Secure Firewall Management Center=5.4.1.2

Cisco Secure Firewall Management Center=5.4.1.3

Cisco Secure Firewall Management Center=5.4.1.4

Cisco Secure Firewall Management Center=5.4.1.5

Cisco Secure Firewall Management Center=5.4.1.6

Cisco Secure Firewall Management Center=5.4.1.9

Cisco Secure Firewall Management Center=5.4_base

Cisco Secure Firewall Management Center=6.0.0

Cisco Secure Firewall Management Center=6.0.0.0

Cisco Secure Firewall Management Center=6.0.0.1

Cisco Secure Firewall Management Center=6.0.1

Cisco Secure Firewall Management Center=6.0.1.1

Cisco Secure Firewall Management Center=6.0.1.3

Cisco Secure Firewall Management Center=6.0_base

Cisco Secure Firewall Management Center=6.1.0

Cisco Secure Firewall Management Center=6.1.0.2

Cisco Secure Firewall Management Center=6.2.0

Cisco Secure Firewall Management Center=6.2.0.2

Cisco FirePOWER Management Center=5.4.0

Cisco FirePOWER Management Center=5.4.0.2

Cisco FirePOWER Management Center=5.4.1

Cisco FirePOWER Management Center=5.4.1.1

Cisco FirePOWER Management Center=5.4.1.2

Cisco FirePOWER Management Center=5.4.1.3

Cisco FirePOWER Management Center=5.4.1.4

Cisco FirePOWER Management Center=5.4.1.5

Cisco FirePOWER Management Center=5.4.1.6

Cisco FirePOWER Management Center=5.4.1.9

Cisco FirePOWER Management Center=5.4_base

Cisco FirePOWER Management Center=6.0.0

Cisco FirePOWER Management Center=6.0.0.0

Cisco FirePOWER Management Center=6.0.0.1

Cisco FirePOWER Management Center=6.0.1

Cisco FirePOWER Management Center=6.0.1.1

Cisco FirePOWER Management Center=6.0.1.3

Cisco FirePOWER Management Center=6.0_base

Cisco FirePOWER Management Center=6.1.0

Cisco FirePOWER Management Center=6.1.0.2

Cisco FirePOWER Management Center=6.2.0

Cisco FirePOWER Management Center=6.2.0.2

Event History

Jul 4, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·12:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-6717?

CVE-2017-6717 has a medium severity rating, allowing an authenticated attacker to exploit the vulnerability.

How do I fix CVE-2017-6717?

To fix CVE-2017-6717, upgrade to one of the known fixed releases provided by Cisco.

What systems are affected by CVE-2017-6717?

CVE-2017-6717 affects specific versions of Cisco Secure Firewall Management Center and Cisco Firepower Management Center.

Can CVE-2017-6717 lead to data breaches?

Yes, CVE-2017-6717 can allow attackers to perform cross-site scripting (XSS) attacks potentially leading to data exposure.

Is CVE-2017-6717 relevant for my organization?

If your organization uses the affected Cisco products, CVE-2017-6717 is relevant and should not be overlooked.