VDB
CVE-2017-12269
CVE-2017-12269
PUBLISHED
CVSS 3.5 LOW
A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack. The vulnerability is due to insufficient input validation by the web UI of the affected software. An attacker could exploit this vulnerability by injecting XSS content into the web UI of the affected software. A successful exploit could allow the attacker to force a user to execute code of the attacker's choosing or allow the attacker to retrieve sensitive information from the user. Cisco Bug IDs: CSCvf70587, CSCvf70592.
EPSS 0.36% · 58.7th percentile
Risk Scores
CVSS 2.0
3.5
EPSS Score
0.36%
58.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Cisco Spark Messaging | * |
| cisco | spark |
Exploit Intelligence
Timeline
- Oct 5, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
- Jan 8, 2023 EPSS Score