CVE-2017-6725: A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, rem...

Security readout for executives and security teams

This flaw affects Cisco Prime Infrastructure’s web interface. An unauthenticated remote attacker could trigger cross-site scripting against someone using the affected interface, potentially exposing that user to browser-based actions or data theft. The supplied sources name release 2.2(2) as affected but do not provide CVSS details here. Exposure is most likely where Cisco Prime Infrastructure web interfaces are reachable by users, especially deployments running release 2.2(2). Internet-exposed management interfaces would increase business risk, but the provided sources do not confirm broader affected version ranges. Treat this as a moderate-priority management-plane issue. Prioritize if Cisco Prime Infrastructure is exposed beyond trusted administrators or remains on release 2.2(2). Remediation should follow Cisco’s advisory because the supplied CVE data does not include patch version details. Mitigation focus: Identify Cisco Prime Infrastructure deployments and versions, prioritizing 2.2(2).; Review Cisco advisory cisco-sa-20170621-piwf1 for fixed releases and workarounds.; Apply Cisco-recommended remediation when applicability is confirmed..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.