CVE-2017-1440

IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 128105.

• CWE-94

• http://www-01.ibm.com/support/docview.wss?uid=swg22005550Patch, Vendor Advisory
• http://www.securityfocus.com/bid/99542Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128105VDB Entry, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg22005550Patch, Vendor Advisory
• http://www.securityfocus.com/bid/99542Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128105VDB Entry, Vendor Advisory

Published

Aug 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14394OAuth 2.0 Authorization Server of ForgeRock Access Managemen…
• CVE-2017-14395Auth 2.0 Authorization Server of ForgeRock Access Management…
• CVE-2017-14396In osTicket before 1.10.1, SQL injection is possible by cons…
• CVE-2017-14397AnyDesk before 3.6.1 on Windows has a DLL injection vulnerab…
• CVE-2017-14398rzpnk.sys in Razer Synapse 2.20.15.1104 allows local users t…7.8
• CVE-2017-14399In BlackCat CMS 1.2.2, unrestricted file upload is possible …
• CVE-2017-14400In ImageMagick 7.0.7-1 Q16, the PersistPixelCache function i…
• CVE-2017-14401The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL i…
• CVE-2017-14402The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL i…
• CVE-2017-14403The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL i…
• CVE-2017-14404The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows lo…
• CVE-2017-14405The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows re…