CVE-2017-6769: cisco secure_access_control_system Cross-site Scripting
Vulnerability summary
CVE-2017-6769 is a medium (CVSS 5.4) Cross-site Scripting vulnerability in cisco secure_access_control_system. EPSS estimates a 0.89% chance of exploitation in the next 30 days, higher than 58.7% of scored vulnerabilities.
Timeline
- 07-08-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCve70587. Known Affected Releases: 5.8(0.8) 5.8(1.5).
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.89%
Chance of exploitation in the next 30 days
Percentile
59%
Versus all other CVEs
30-day change
0.00 pp
From 0.89% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco1 product
- secure_access_control_system5.8\(0.8\) | 5.8\(1.5\)
1 vendor · 1 product
References
3 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-acsX Refsource CONFIRMVendor Advisory