[FD] SEC Consult SA-20170622-0 :: XXE, SQLi, XSS & local file disclosure in Cisco Prime Infrastructure

SEC Consult Vulnerability Lab Security Advisory < 20170622-0 > ======================================================================= title: XML External Entity Injection (XXE), SQL Injection, Cross Site Scripting, Local File Disclosure product: Cisco Prime Infrastructure vulnerable version: 1.1 through 3.1.6 fixed version: 3.1.6 Update 1 (patch), 3.1.7 (future release) CVE number: CVE-2017-6662, CVE-2017-6698, CVE-2017-6699, CVE-2017-6700 impact: high homepage: http://ift.tt/1ChATbv found: 2016-11-21 by: P. Morimoto (Office Bangkok) SEC Consult Vulnerability Lab An integrated part of SEC Consult Bangkok - Berlin - Linz - Luxembourg - Montreal - Moscow Kuala Lumpur - Singapore - Vienna (HQ) - Vilnius - Zurich http://ift.tt/1mGHMNR ======================================================================= Vendor description:

Source: Gmail -> IFTTT-> Blogger