CVE-2017-3829: A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches coul...

Security readout for executives and security teams

CVE-2017-3829 is a cross-site scripting issue in the Cisco Unified Communications Manager web management interface. An unauthenticated remote attacker could target a user of that interface. Business urgency depends on whether affected CUCM management pages are reachable and whether administrators still use a vulnerable build. Exposure is most likely in environments running the listed affected Cisco Unified Communications Manager release with web-based management reachable to untrusted users or networks. The source bundle does not provide complete affected-version ranges, CPEs, or CVSS data. Treat this as a targeted management-plane issue, not a broad wormable outage risk based on current evidence. Prioritize inventory and upgrades for CUCM systems where administrators access the web UI from exposed or mixed-trust networks. Mitigation focus: Identify Cisco Unified Communications Manager deployments and current software versions.; Upgrade affected systems to a vendor-listed fixed release where applicable.; Review Cisco advisory CSCvc30999 before selecting a production remediation path..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.