CVE-2017-9376

ManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the defModule parameter in DefaultConfigDef.do and AssetDefaultConfigDef.do.

• CWE-20

• http://www.securityfocus.com/bid/107558Third Party Advisory, VDB Entry
• https://labs.integrity.pt/advisories/cve-2017-9376/Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/107558Third Party Advisory, VDB Entry
• https://labs.integrity.pt/advisories/cve-2017-9376/Exploit, Vendor Advisory

Published

Mar 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9370An information disclosure / elevation of privilege vulnerabi…
• CVE-2017-9371In BlackBerry QNX Software Development Platform (SDP) 6.6.0 …2.6
• CVE-2017-9372PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 a…
• CVE-2017-9373Memory leak in QEMU (aka Quick Emulator), when built with ID…5.5
• CVE-2017-9374Memory leak in QEMU (aka Quick Emulator), when built with US…5.5
• CVE-2017-9375QEMU (aka Quick Emulator), when built with USB xHCI controll…5.5
• CVE-2017-9377A command injection was identified on Barco ClickShare Base …
• CVE-2017-9378BigTree CMS through 4.2.18 does not prevent a user from dele…
• CVE-2017-9379Multiple CSRF issues exist in BigTree CMS through 4.2.18 - t…
• CVE-2017-9380OpenEMR 5.0.0 and prior allows low-privilege users to upload…8.8
• CVE-2017-9381An issue was discovered on Vera VeraEdge 1.7.19 and Veralite…
• CVE-2017-9382An issue was discovered on Vera VeraEdge 1.7.19 and Veralite…