CVE-2017-6661

A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device, aka Message Tracking XSS. More Information: CSCvd30805 CSCvd34861. Known Affected Releases: 10.0.0-203 10.1.0-049.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:content_security_management_appliance:10.0.0-203:*:*:*:*:*:*:*
cpe:2.3:a:cisco:content_security_management_appliance:10.1.0-049:*:*:*:*:*:*:*
cpe:2.3:a:cisco:email_security_appliance:10.0.0-203:*:*:*:*:*:*:*
cpe:2.3:a:cisco:email_security_appliance:10.1.0-049:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-06-13 06:29

Updated : 2024-02-04 19:29


NVD link : CVE-2017-6661

Mitre link : CVE-2017-6661

CVE.ORG link : CVE-2017-6661


JSON object : View

Products Affected

cisco

  • email_security_appliance
  • content_security_management_appliance
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')