CVE-2017-6724: XSS

Published Jul 4, 2017

Updated

A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65843. Known Affected Releases: 3.1(0.0).

Affected Software

1 affected component

cisco Prime Infrastructure=3.1\(0.0\)

Event History

Jul 4, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-6724?

CVE-2017-6724 is classified as a high-severity vulnerability due to its potential for allowing cross-site scripting (XSS) attacks.

How do I fix CVE-2017-6724?

To mitigate CVE-2017-6724, upgrade to a patched version of Cisco Prime Infrastructure that addresses this vulnerability.

Who is affected by CVE-2017-6724?

Any user operating Cisco Prime Infrastructure version 3.1(0.0) is at risk from CVE-2017-6724.

What type of attack does CVE-2017-6724 enable?

CVE-2017-6724 enables unauthenticated remote attackers to perform cross-site scripting (XSS) attacks.

Is authentication required to exploit CVE-2017-6724?

No, CVE-2017-6724 can be exploited by unauthenticated remote attackers.