2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-10054 | — | — | 0.4% | Oct 19, 2017 | Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcom... |
| CVE-2017-10051 | — | — | 0.9% | Oct 19, 2017 | Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filter... |
| CVE-2017-10050 | — | — | 1.4% | Oct 19, 2017 | Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). ... |
| CVE-2017-10037 | — | — | 2.6% | Oct 19, 2017 | Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). Supporte... |
| CVE-2017-10034 | — | — | 2.0% | Oct 19, 2017 | Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API). Supp... |
| CVE-2017-10033 | — | — | 2.3% | Oct 19, 2017 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Support... |
| CVE-2017-10026 | — | — | 1.9% | Oct 19, 2017 | Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Fabric Layer). The supported ... |
| CVE-2017-10014 | — | — | 0.8% | Oct 19, 2017 | Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/... |
| CVE-2017-12579 | — | — | 1.5% | Oct 19, 2017 | An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and ear... |
| CVE-2017-3883 | — | — | 4.5% | Oct 19, 2017 | A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible ... |
| CVE-2017-15612 | — | — | 0.9% | Oct 19, 2017 | mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, ... |
| CVE-2017-15611 | — | — | 0.7% | Oct 19, 2017 | In Octopus before 3.17.7, an authenticated user who was explicitly granted the permission to invite new users (aka UserI... |
| CVE-2017-15610 | — | — | 0.6% | Oct 19, 2017 | An issue was discovered in Octopus before 3.17.7. When the special Guest user account is granted the CertificateExportPr... |
| CVE-2017-15609 | — | — | 0.8% | Oct 19, 2017 | Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in cert... |
| CVE-2017-12301 | — | — | 0.4% | Oct 19, 2017 | A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker t... |
| CVE-2017-12298 | — | — | 1.2% | Oct 19, 2017 | A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site sc... |
| CVE-2017-12296 | — | — | 1.2% | Oct 19, 2017 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site s... |
| CVE-2017-12293 | — | — | 2.3% | Oct 19, 2017 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of serv... |
| CVE-2017-12289 | — | — | 0.4% | Oct 19, 2017 | A vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE Software could allow an auth... |
| CVE-2017-12288 | — | — | 1.2% | Oct 19, 2017 | A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthentic... |
| CVE-2017-12287 | — | — | 1.6% | Oct 19, 2017 | A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePre... |
| CVE-2017-12286 | — | — | 0.4% | Oct 19, 2017 | A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profi... |
| CVE-2017-12285 | — | — | 37.2% | Oct 19, 2017 | A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote at... |
| CVE-2017-12284 | — | — | 0.4% | Oct 19, 2017 | A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to ... |
| CVE-2017-12272 | — | — | 1.2% | Oct 19, 2017 | A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to co... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now