CVE-2017-3845: Cisco Prime Collaboration Assurance

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are vulnerable. Cisco Prime Collaboration Assurance software versions prior to 11.0 are not vulnerable. More Information: CSCvc77783. Known Affected Releases: 11.5(0).

Affected products

• Cisco Prime Collaboration Assurance: version 11.0.0 only; version 11.1.0 only; version 11.5.0 only

Published 2017-02-22. Last modified 2026-06-17.