CVE-2017-6764

CVE-2017-6764 describes a Cross-Site Scripting (XSS) vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.5(1). This flaw stems from insufficient input validation, allowing an authenticated, remote attacker to inject malicious script code. The vulnerability has a CVSS score of 5.4 (Medium), indicating a low-complexity attack requiring user interaction, with potential impacts including information disclosure and arbitrary script execution within the interface. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.