CVE-2017-3844: A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could...

Security readout for executives and security teams

Cisco Prime Collaboration Assurance 11.0, 11.1, and 11.5 had a UI export flaw that could let a logged-in remote user list directories and download files. Business risk depends on what files are reachable and who can access the application. Exposure is likely limited to organizations still running Cisco Prime Collaboration Assurance 11.0, 11.1, or 11.5. Risk increases if the management UI is reachable from broad internal networks or the internet, or if many non-administrator accounts exist. Prioritize if the product remains deployed, especially where the UI is broadly reachable or contains sensitive operational data. This is not KEV-listed in the supplied sources, but it can expose files to authenticated users and should not remain untreated on management systems. Mitigation focus: Inventory Cisco Prime Collaboration Assurance versions and flag 11.0, 11.1, and 11.5.; Consult Cisco advisory cisco-sa-20170215-pcp2 for fixed software or workaround guidance.; Restrict UI access to trusted administrator networks and VPN paths..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.