CVE-2017-3810

2017-02-0307:24:00

cisco

www.cve.org

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

38.3%

JSON

A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirect attack against a user who is logged in to an affected system. More Information: CSCvb21745. Known Affected Releases: 10.0_R2_tanggula.

CNA Affected

[
  {
    "product": "Cisco Prime Service Catalog 10.0_R2_tanggula",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Prime Service Catalog 10.0_R2_tanggula"
      }
    ]
  }
]