CVE-2016-9222

MEDIUM

Cisco NetFlow Generation Appliance - XSS

Title source: llm

Description

A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvb15229. Known Affected Releases: 1.0(2).

References (2)

[Vendor Advisory] https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-nga

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/95640

Scores

CVSS v3 6.1

EPSS 0.0027

EPSS Percentile 50.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE

CWE-79

Status published

Affected Products (2)

cisco/netflow_generation_appliance

n/a/Cisco NetFlow Generation Appliance 1.0(2) < Cisco NetFlow Generation Appliance 1.0(2)

Timeline

Published Jan 26, 2017

Tracked Since Feb 18, 2026