NVD

Id
84639  
Name
CVE-2017-3848  
Description
A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCuw63001 CSCuw63003. Known Affected Releases: 2.2(2). Known Fixed Releases: 3.1(0.0).  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2017-04-07  
Modified Date
2017-07-17  
Seq
2017-3848  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
414003 84639 CVE-2017-5618 http://git.savannah.gnu.org/cgit/screen.git/patch/?id=1c6d2817926d30c9a7a97d99af7ac5de4a5845b8  View
414004 84639 CVE-2017-5618 http://git.savannah.gnu.org/cgit/screen.git/tree/src/ChangeLog?h=v.4.5.1  View
414005 84639 CVE-2017-5618 http://savannah.gnu.org/bugs/?50142  View
414006 84639 CVE-2017-5618 [oss-security] 20170129 Re: CVE request: GNU screen escalation  View
414007 84639 CVE-2017-5618 95873  View
414008 84639 CVE-2017-5618 [screen-devel] 20170124 [bug #50142] root exploit 4.5.0  View
414009 84639 CVE-2017-5618 http://git.savannah.gnu.org/cgit/screen.git/patch/?id=1c6d2817926d30c9a7a97d99af7ac5de4a5845b8  View
414010 84639 CVE-2017-5618 http://git.savannah.gnu.org/cgit/screen.git/tree/src/ChangeLog?h=v.4.5.1  View
414011 84639 CVE-2017-5618 http://savannah.gnu.org/bugs/?50142  View
414012 84639 CVE-2017-5618 [oss-security] 20170129 Re: CVE request: GNU screen escalation  View
414013 84639 CVE-2017-5618 95873  View
414014 84639 CVE-2017-5618 [screen-devel] 20170124 [bug #50142] root exploit 4.5.0  View
417246 84639 CVE-2017-2412 97138  View
417247 84639 CVE-2017-2412 https://support.apple.com/HT207617  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66586 JVNDB-2017-002911 Cisco Prime Infrastructure の HTTP ウェブベースの管理インターフェースにおけるクロスサイトスクリプティング攻撃を実行される脆弱性 Cisco Prime Infrastructure の HTTP ウェブベースの管理インターフェースには、Web インターフェースのユーザにクロスサイトスクリプティング (XSS) 攻撃を実行される脆弱性が存在します。 CVE-2017-3848 0 CVE-2017-3848 84639 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002911.html 2017-03-01 2017-05-08 View