CVE-2017-12346

Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247.

Severity	MEDIUM
CVSS	6.1
EPSS	0.23% EPSS low
CWE	CWE-79
KEV
Published	8 years ago
Modified	1 week ago

Public Affected Products

Product	Advisory	Evidence
Cisco Prime Data Center Network Manager (DCNM)	cisco-sa-20171129-dcnm	Cisco CSAF · structured affected