CVE-2017-6725: XSS

Published Jul 4, 2017

Updated

A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65833 CSCuw65837. Known Affected Releases: 2.2(2).

Affected Software

1 affected component

cisco Prime Infrastructure=2.2\(2\)

Event History

Jul 4, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-6725?

CVE-2017-6725 is classified as a high severity vulnerability due to its potential to allow XSS attacks.

How do I fix CVE-2017-6725?

To mitigate CVE-2017-6725, upgrade Cisco Prime Infrastructure to a version that is not affected by this vulnerability.

Who is affected by CVE-2017-6725?

CVE-2017-6725 affects users running Cisco Prime Infrastructure version 2.2(2).

What type of vulnerability is CVE-2017-6725?

CVE-2017-6725 is a Cross-Site Scripting (XSS) vulnerability in Cisco Prime Infrastructure.

Can CVE-2017-6725 be exploited remotely?

Yes, CVE-2017-6725 can be exploited remotely by an unauthenticated attacker.