CVE-2017-12364

A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unauthorized Structured Query Language (SQL) queries. The vulnerability is due to a failure to validate user-supplied input that is used in SQL queries. An attacker could exploit this vulnerability by sending a crafted SQL statement to an affected system. Successful exploitation could allow the attacker to read entries in some database tables. Cisco Bug IDs: CSCvg30333.

• CWE-89
• CWE-89

• http://www.securityfocus.com/bid/102004Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039926Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-primeVendor Advisory
• http://www.securityfocus.com/bid/102004Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039926Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-primeVendor Advisory

Published

Nov 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12359A Buffer Overflow vulnerability in Cisco WebEx Network Recor…
• CVE-2017-1236IBM WebSphere MQ 9.0.2 could allow an authenticated user to …
• CVE-2017-12360A vulnerability in Cisco WebEx Network Recording Player for …
• CVE-2017-12361A vulnerability in Cisco Jabber for Windows could allow an u…
• CVE-2017-12362A vulnerability in Cisco Meeting Server versions prior to 2.…
• CVE-2017-12363A vulnerability in Cisco WebEx Meeting Server could allow an…
• CVE-2017-12365A vulnerability in Cisco WebEx Event Center could allow an a…
• CVE-2017-12366A vulnerability in Cisco WebEx Meeting Center could allow an…
• CVE-2017-12367A "Cisco WebEx Network Recording Player Denial of Service Vu…
• CVE-2017-12368A "Cisco WebEx Network Recording Player Remote Code Executio…
• CVE-2017-12369A "Cisco WebEx Network Recording Player Out-of-Bounds Vulner…
• CVE-2017-1237IBM Jazz based applications are vulnerable to cross-site scr…5.4