CVE-2017-6716: cisco secure_firewall_management_center Cross-site Scripting
Vulnerability summary
CVE-2017-6716 is a medium (CVSS 5.4) Cross-site Scripting vulnerability in cisco secure_firewall_management_center. EPSS estimates a 0.64% chance of exploitation in the next 30 days, higher than 50.1% of scored vulnerabilities.
Timeline
- 04-07-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. Affected Products: Cisco Firepower Management Center Software Releases prior to 6.0.0.0. More Information: CSCuy88785. Known Affected Releases: 5.4.1.6.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.64%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.64% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco1 product
- secure_firewall_management_center5.3.1.7 | 5.4.0 | 5.4.0.2 | 5.4.1 | 5.4.1.1 | 5.4.1.2 | 5.4.1.3 | 5.4.1.4 | 5.4.1.5 | 5.4.1.6 | 5.4.1.9
1 vendor · 1 product
References
2 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fmc2X Refsource CONFIRMVendor Advisory