CVE-2017-3810: Cisco Prime Service Catalog

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirect attack against a user who is logged in to an affected system. More Information: CSCvb21745. Known Affected Releases: 10.0_R2_tanggula.

Affected products

• Cisco Prime Service Catalog: version 10.0(r2)_base only

Published 2017-02-03. Last modified 2026-06-17.