Multiple Vulnerabilities in Cisco Data Center Network Manager Software
CVE-2017-12343

8.8HIGH

Key Information:

Vendor

Cisco
Status
Cisco Data Center Network Manager Software
Vendor
CVE Published:
30 November 2017

What is CVE-2017-12343?

Cisco Data Center Network Manager Software contains several vulnerabilities that could allow a remote attacker to manipulate configuration parameters, potentially redirect users to malicious sites, inject harmful content into the client interface, or perpetrate cross-site scripting (XSS) attacks against affected users. These vulnerabilities stem from various Cisco Bug IDs and highlight the importance of applying necessary security updates to mitigate risks.

Affected Version(s)

Cisco Data Center Network Manager Software Cisco Data Center Network Manager Software

References

http://www.securityfocus.com/bid/101996
vdb-entryx_refsource_BID
https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.