Vulnslist

Cisco product, release, and evidence lookup

Cisco Unified Intelligence Center User Interface Cross-Site Request Forgery Vulnerability

cisco-sa-20170920-cuic1 · Medium · Published · Updated

Data: Cisco advisories · Cisco CSAF · NVD CVEs · NVD CPEs · CISA KEV · EPSS

A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection. An attacker could exploit this vulnerability by tricking the user of a web application into executing an adverse action. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-cuic1

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2017-12253
Cisco Bug IDsCSCve76872
CVSS ScoreBase 6.1
Base 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X

Products with public affected evidence

Product CVE Affected evidence
Cisco Unified Intelligence Center CVE-2017-12253 structured affected CSAF product_status