NVD

Id
83175  
Name
CVE-2017-3874  
Description
A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS) attack. More Information: CSCvb70033. Known Affected Releases: 11.5(1.11007.2). Known Fixed Releases: 12.0(0.98000.507) 11.0(1.23900.5) 11.0(1.23900.3) 10.5(2.15900.2).  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2017-03-17  
Modified Date
2017-07-11  
Seq
2017-3874  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408698 83175 CVE-2017-6076 https://github.com/wolfSSL/wolfssl/releases/tag/v3.10.2-stable  View
408699 83175 CVE-2017-6076 https://github.com/wolfSSL/wolfssl/releases/tag/v3.10.2-stable  View
408700 83175 CVE-2017-6076 https://github.com/wolfSSL/wolfssl/releases/tag/v3.10.2-stable  View
411096 83175 CVE-2017-0474 96717  View
411097 83175 CVE-2017-0474 https://source.android.com/security/bulletin/2017-03-01.html  View
411098 83175 CVE-2017-0474 96717  View
411099 83175 CVE-2017-0474 https://source.android.com/security/bulletin/2017-03-01.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66123 JVNDB-2017-002462 Cisco Unified Communications Manager の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性 Cisco Unified Communications Manager (CallManager) の Web フレームワークには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2017-3874 CVE-2017-3874 83175 3.5 5.4 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002462.html 2017-03-15 2017-04-14 View