CVE-2017-12322

CVE-2017-12322 describes multiple vulnerabilities in the web interface of Cisco Registered Envelope Service, specifically affecting Cisco Email Encryption. These vulnerabilities, stemming from insufficient input validation (CWE-79), allow unauthenticated, remote attackers to conduct cross-site scripting (XSS) attacks or redirect users to malicious web pages. With a CVSS score of 6.1 (Medium), exploitation requires user interaction (UI:R) via a malicious link or HTTP request, potentially leading to arbitrary script execution or sensitive information disclosure. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.