CVE-2017-6661

A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device, aka Message Tracking XSS. More Information: CSCvd30805 CSCvd34861. Known Affected Releases: 10.0.0-203 10.1.0-049.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:content_security_management_appliance:10.0.0-203:*:*:*:*:*:*:*
cpe:2.3:a:cisco:email_security_appliance:10.1.0-049:*:*:*:*:*:*:*
cpe:2.3:a:cisco:email_security_appliance:10.0.0-203:*:*:*:*:*:*:*
cpe:2.3:a:cisco:content_security_management_appliance:10.1.0-049:*:*:*:*:*:*:*

Information

Published : 2017-06-12 23:29

Updated : 2017-07-07 18:29


NVD link : CVE-2017-6661

Mitre link : CVE-2017-6661


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

cisco

  • content_security_management_appliance
  • email_security_appliance