CVE-2017-12253

High

Published: 21/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability in the Cisco Unified Intelligence Center allows an unauthenticated, remote attacker to execute unwanted actions. The issue is due to a lack of cross-site request forgery (CSRF) protection.

Risk Assessment

An attacker could exploit this vulnerability by tricking the user of a web application into executing an adverse action, potentially leading to serious security implications for the organization.

Recommendation

It is recommended to implement appropriate CSRF protection mechanisms and regularly update Cisco software to mitigate this vulnerability.

Other vulnerabilities in Cisco Unified Intelligence Center

CVE-2026-20327Medium
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to read the contents of the internal database of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.

Original NVD description (English source)

A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection. An attacker could exploit this vulnerability by tricking the user of a web application into executing an adverse action. Cisco Bug IDs: CSCve76872.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS