CVE-2017-12347CWE-79

Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration…

published November 30, 2017

CVSS
—
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00850 · 57.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2017-11-30T09:00Z
EPSS history
Timeline
  • 30 NOV 09:00Z
    Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration…
    cvelistv5