Skip to content
OpenAdvisories
Unscored CVE-2017-12349 EUVD-2017-3922GHSA-cvvh-736r-7rrr

Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cro…

Published Nov 30, 2017 · Updated Aug 5, 2024 · Assigned by cisco

Description

Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs: CSCvf71978, CSCvf71986.

Affected products

VendorProductAffectedFixed
— Cisco UCS Central Software Cisco UCS Central Software —

References