CVE-2017-1682

IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134004.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22012900Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/134004VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22012900Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/134004VDB Entry, Vendor Advisory

Published

Feb 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16813A denial-of-service issue was discovered in the Foxit Mobile…
• CVE-2017-16814A Directory Traversal issue was discovered in the Foxit Mobi…
• CVE-2017-16815installer.php in the Snap Creek Duplicator (WordPress Site M…
• CVE-2017-16816The condor_schedd component in HTCondor before 8.6.8 and 8.7…
• CVE-2017-16818RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote au…
• CVE-2017-16819A stored cross-site scripting vulnerability in the Icon Time…
• CVE-2017-16820The csnmp_read_table function in snmp.c in the SNMP plugin i…
• CVE-2017-16821b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminPro…5.4
• CVE-2017-16826The coff_slurp_line_table function in coffcode.h in the Bina…
• CVE-2017-16827The aout_get_external_symbols function in aoutx.h in the Bin…
• CVE-2017-16828The display_debug_frames function in dwarf.c in GNU Binutils…
• CVE-2017-16829The _bfd_elf_parse_gnu_properties function in elf-properties…