CVE-2017-3833: A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated...

Security readout for executives and security teams

Cisco Unified Communications Manager had a web-interface flaw that could let an unauthenticated remote attacker trigger cross-site scripting against a user of that interface. This is most concerning where UCM web access is reachable by users or administrators. The source bundle does not show active exploitation. Exposure is likely limited to environments running Cisco Unified Communications Manager versions matching the affected release information, especially where the web interface is reachable from untrusted networks or routinely used by administrators. Treat this as a scheduled remediation item unless UCM web access is broadly exposed. Prioritize faster if administrators access the interface from less trusted networks or if the deployment runs the listed affected release. Mitigation focus: Compare installed Cisco UCM versions against Cisco’s fixed release list.; Upgrade to a Cisco fixed release or current vendor-supported release.; Restrict web-interface access to trusted administrative networks..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.