CVE-2017-1262

IBM Security Guardium 10.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 124737.

• CWE-113

• http://www.ibm.com/support/docview.wss?uid=swg22010438Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/124737Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg22010438Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/124737Third Party Advisory, VDB Entry

Published

Dec 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12614It was noticed an XSS in certain 404 pages that could be exp…
• CVE-2017-12615When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with H…8.1
• CVE-2017-12616When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7…
• CVE-2017-12617When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0…8.1
• CVE-2017-12618Apache Portable Runtime Utility (APR-util) 1.6.0 and prior f…
• CVE-2017-12619Apache Zeppelin prior to 0.7.3 was vulnerable to session fix…
• CVE-2017-12620When loading models or dictionaries that contain XML it is p…
• CVE-2017-12621During Jelly (xml) file parsing with Apache Xerces, if a cus…9.8
• CVE-2017-12622When an Apache Geode cluster before v1.3.0 is operating in s…
• CVE-2017-12623An authorized user could upload a template which contained m…
• CVE-2017-12624Apache CXF supports sending and receiving attachments via ei…
• CVE-2017-12625Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.…