AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-6757

HIGH · CVSS 8.8 EPSS 1.61% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-08-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2017-6757
Severity
HIGH
CVSS
8.8
EPSS
1.61%
Cisco

Original NVD Description

A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker could exploit this vulnerability by sending crafted URLs that include SQL statements. An exploit could allow the attacker to modify or delete entries in some database tables, affecting the integrity of the data. Cisco Bug IDs: CSCve13786.