Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2017-3848

A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCuw63001 CSCuw63003. Known Affected Releases: 2.2(2). Known Fixed Releases: 3.1(0.0).

  • Published: Apr 7, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-3848
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
cisco / prime_infrastructure 2.2(2) 2.2(2).x
cisco / prime_infrastructure 3.0 3.0.x