# Vulnerabilities published in 2017 - [CVE-2017-9024](https://insights.sbomify.com/CVE-2017-9024/): Path traversal in n/a (high 7.5) - [CVE-2017-9023](https://insights.sbomify.com/CVE-2017-9023/): Denial of service in n/a (high 7.5) - [CVE-2017-9022](https://insights.sbomify.com/CVE-2017-9022/): Denial of service in n/a (high 7.5) - [CVE-2017-9003](https://insights.sbomify.com/CVE-2017-9003/): Memory corruption in ArubaOS (high 7.5) - [CVE-2017-9002](https://insights.sbomify.com/CVE-2017-9002/): Cross-site scripting in Aruba ClearPass (medium 6.1) - [CVE-2017-9001](https://insights.sbomify.com/CVE-2017-9001/): Command injection in Aruba ClearPass (high 8.1) - [CVE-2017-9000](https://insights.sbomify.com/CVE-2017-9000/): Path traversal in ArubaOS (critical 9.8) - [CVE-2017-8994](https://insights.sbomify.com/CVE-2017-8994/): Code injection in HPE Operations Orchestration (critical 9.8) - [CVE-2017-8993](https://insights.sbomify.com/CVE-2017-8993/): Cross-site scripting in Project and Portfolio Management (PPM) (medium 5.4) - [CVE-2017-8992](https://insights.sbomify.com/CVE-2017-8992/): Privilege escalation in HPE CentralView Fraud Risk Management (critical 9.8) - [CVE-2017-8991](https://insights.sbomify.com/CVE-2017-8991/): Cross-site scripting in HPE CentralView Fraud Risk Management (medium 5.4) - [CVE-2017-8990](https://insights.sbomify.com/CVE-2017-8990/): Code injection in HPE Intelligent Management Center (IMC) Wirelss Service Manager (critical 9.8) - [CVE-2017-8989](https://insights.sbomify.com/CVE-2017-8989/): Open redirect in HPE Icewall DFW (critical 9.1) - [CVE-2017-8988](https://insights.sbomify.com/CVE-2017-8988/): Security feature bypass in HPE Command View Advanced Edition (critical 9.8) - [CVE-2017-8987](https://insights.sbomify.com/CVE-2017-8987/): Denial of service in HPE Integrated Lights-Out 3 (iLO 3) (high 8.6) - [CVE-2017-8985](https://insights.sbomify.com/CVE-2017-8985/): Information disclosure in XP Storage using HGLM (medium 5.3) - [CVE-2017-8984](https://insights.sbomify.com/CVE-2017-8984/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8) - [CVE-2017-8983](https://insights.sbomify.com/CVE-2017-8983/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8) - [CVE-2017-8982](https://insights.sbomify.com/CVE-2017-8982/): Auth bypass in Intelligent Management Center (iMC) PLAT (high 7.5) - [CVE-2017-8981](https://insights.sbomify.com/CVE-2017-8981/): Code injection in Intelligent Management Center (iMC) PLAT (critical 9.8) - [CVE-2017-8980](https://insights.sbomify.com/CVE-2017-8980/): Information disclosure in Intelligent Management Center (iMC) PLAT (high 7.5) - [CVE-2017-8979](https://insights.sbomify.com/CVE-2017-8979/): Auth bypass in Integrated Lights-Out 2 (iLO 2) (critical 9.8) - [CVE-2017-8978](https://insights.sbomify.com/CVE-2017-8978/): Information disclosure in IceWall Products (medium 4.6) - [CVE-2017-8977](https://insights.sbomify.com/CVE-2017-8977/): Denial of service in Moonshot Provisioning Manager Appliance (critical 9.1) - [CVE-2017-8976](https://insights.sbomify.com/CVE-2017-8976/): Code injection in Moonshot Provisioning Manager Appliance (critical 9.8) - [CVE-2017-8975](https://insights.sbomify.com/CVE-2017-8975/): Code injection in Moonshot Provisioning Manager Appliance (critical 9.8) - [CVE-2017-8974](https://insights.sbomify.com/CVE-2017-8974/): Auth bypass in NonStop Server (medium 4.4) - [CVE-2017-8973](https://insights.sbomify.com/CVE-2017-8973/): Other in Matrix Operating Environment (medium 4.3) - [CVE-2017-8972](https://insights.sbomify.com/CVE-2017-8972/): Cross-site request forgery in Matrix Operating Environment (medium 4.3) - [CVE-2017-8971](https://insights.sbomify.com/CVE-2017-8971/): Cross-site request forgery in Matrix Operating Environment (medium 4.3) - [CVE-2017-8970](https://insights.sbomify.com/CVE-2017-8970/): Information disclosure in Matrix Operating Environment (medium 5.3) - [CVE-2017-8969](https://insights.sbomify.com/CVE-2017-8969/): Other in Insight Control (medium 5.7) - [CVE-2017-8968](https://insights.sbomify.com/CVE-2017-8968/): A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 (hprest-1.5-79.x86_64.rpm, ilo (high 7.8) - [CVE-2017-8967](https://insights.sbomify.com/CVE-2017-8967/): Deserialization in Intelligent Management Center (iMC) PLAT (high 8.8) - [CVE-2017-8966](https://insights.sbomify.com/CVE-2017-8966/): Deserialization in Intelligent Management Center (iMC) PLAT (high 8.8) - [CVE-2017-8965](https://insights.sbomify.com/CVE-2017-8965/): Deserialization in Intelligent Management Center (iMC) PLAT (high 8.8) - [CVE-2017-8964](https://insights.sbomify.com/CVE-2017-8964/): Deserialization in Intelligent Management Center (iMC) PLAT (high 8.8) - [CVE-2017-8963](https://insights.sbomify.com/CVE-2017-8963/): Deserialization in Intelligent Management Center (iMC) PLAT (high 8.8) - [CVE-2017-8962](https://insights.sbomify.com/CVE-2017-8962/): Deserialization in Intelligent Management Center (iMC) PLAT (high 8.8) - [CVE-2017-8961](https://insights.sbomify.com/CVE-2017-8961/): Path traversal in Intelligent Management Center (high 8.8) - [CVE-2017-8960](https://insights.sbomify.com/CVE-2017-8960/): Auth bypass in MSA 1040 and 2040 SAN Storage (critical 9.8) - [CVE-2017-8959](https://insights.sbomify.com/CVE-2017-8959/): Auth bypass in MSA 1040 and 2040 SAN Storage (high 8.8) - [CVE-2017-8958](https://insights.sbomify.com/CVE-2017-8958/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8) - [CVE-2017-8957](https://insights.sbomify.com/CVE-2017-8957/): Code injection in Intelligent Management Center (iMC) PLAT (critical 9.8) - [CVE-2017-8956](https://insights.sbomify.com/CVE-2017-8956/): Code injection in Intelligent Management Center (iMC) PLAT (critical 9.8) - [CVE-2017-8955](https://insights.sbomify.com/CVE-2017-8955/): Code injection in Intelligent Management Center (iMC) PLAT (high 7.5) - [CVE-2017-8954](https://insights.sbomify.com/CVE-2017-8954/): Code injection in Intelligent Management Center (iMC) PLAT (critical 9.8) - [CVE-2017-8953](https://insights.sbomify.com/CVE-2017-8953/): Cross-site scripting in LoadRunner and Performance Center (medium 5.4) - [CVE-2017-8952](https://insights.sbomify.com/CVE-2017-8952/): Information disclosure in SiteScope (high 7.5) - [CVE-2017-8951](https://insights.sbomify.com/CVE-2017-8951/): Information disclosure in SiteScope (high 7.8) - [CVE-2017-8950](https://insights.sbomify.com/CVE-2017-8950/): Information disclosure in SiteScope (medium 5.5) - [CVE-2017-8949](https://insights.sbomify.com/CVE-2017-8949/): Information disclosure in SiteScope (medium 5.5) - [CVE-2017-8948](https://insights.sbomify.com/CVE-2017-8948/): Security feature bypass in Network Node Manager i (NNMi) Software (critical 9.8) - [CVE-2017-8947](https://insights.sbomify.com/CVE-2017-8947/): Path traversal in UCMDB (critical 9.8) - [CVE-2017-8946](https://insights.sbomify.com/CVE-2017-8946/): Code injection in Aruba AirWave Glass (high 8.3) - [CVE-2017-8945](https://insights.sbomify.com/CVE-2017-8945/): Open redirect in IceWall Federation Agent (medium 6.1) - [CVE-2017-8944](https://insights.sbomify.com/CVE-2017-8944/): Information disclosure in Cloud Optimizer (high 7.5) - [CVE-2017-8943](https://insights.sbomify.com/CVE-2017-8943/): Weak cryptography in n/a (medium 5.9) - [CVE-2017-8942](https://insights.sbomify.com/CVE-2017-8942/): Weak cryptography in n/a (medium 5.9) - [CVE-2017-8941](https://insights.sbomify.com/CVE-2017-8941/): Weak cryptography in n/a (medium 5.9) - [CVE-2017-8940](https://insights.sbomify.com/CVE-2017-8940/): Weak cryptography in n/a (medium 5.9) - [CVE-2017-8939](https://insights.sbomify.com/CVE-2017-8939/): Weak cryptography in n/a (medium 5.9) - [CVE-2017-8938](https://insights.sbomify.com/CVE-2017-8938/): Weak cryptography in n/a (medium 5.9) - [CVE-2017-8937](https://insights.sbomify.com/CVE-2017-8937/): Weak cryptography in n/a (medium 5.9) - [CVE-2017-8936](https://insights.sbomify.com/CVE-2017-8936/): Weak cryptography in n/a (medium 5.9) - [CVE-2017-8935](https://insights.sbomify.com/CVE-2017-8935/): Weak cryptography in n/a (medium 5.9) - [CVE-2017-8934](https://insights.sbomify.com/CVE-2017-8934/): Denial of service in n/a (medium 5.5) - [CVE-2017-8933](https://insights.sbomify.com/CVE-2017-8933/): Denial of service in n/a (low 3.3) - [CVE-2017-8932](https://insights.sbomify.com/CVE-2017-8932/): Other in n/a (medium 5.9) - [CVE-2017-8931](https://insights.sbomify.com/CVE-2017-8931/): Privilege escalation in n/a (critical 9.8) - [CVE-2017-8930](https://insights.sbomify.com/CVE-2017-8930/): Cross-site request forgery in n/a (high 8.8) - [CVE-2017-8929](https://insights.sbomify.com/CVE-2017-8929/): Use after free in n/a (high 7.5) - [CVE-2017-8928](https://insights.sbomify.com/CVE-2017-8928/): Cross-site request forgery in n/a (high 8.8) - [CVE-2017-8927](https://insights.sbomify.com/CVE-2017-8927/): Memory corruption in n/a (high 7.8) - [CVE-2017-8926](https://insights.sbomify.com/CVE-2017-8926/): Memory corruption in n/a (high 7.8) - [CVE-2017-8925](https://insights.sbomify.com/CVE-2017-8925/): Denial of service in n/a (medium 5.5) - [CVE-2017-8924](https://insights.sbomify.com/CVE-2017-8924/): Integer overflow in n/a (medium 4.6) - [CVE-2017-8923](https://insights.sbomify.com/CVE-2017-8923/): Integer overflow in n/a (critical 9.8) - [CVE-2017-8921](https://insights.sbomify.com/CVE-2017-8921/): Path traversal in n/a (high 7.5) - [CVE-2017-8920](https://insights.sbomify.com/CVE-2017-8920/): Cross-site scripting in n/a (medium 6.1) - [CVE-2017-8919](https://insights.sbomify.com/CVE-2017-8919/): Information disclosure in n/a (medium 6.5) - [CVE-2017-8918](https://insights.sbomify.com/CVE-2017-8918/): XML external entity in n/a (medium 5.5) - [CVE-2017-8917](https://insights.sbomify.com/CVE-2017-8917/): SQL injection in n/a (critical 9.8) - [CVE-2017-8916](https://insights.sbomify.com/CVE-2017-8916/): Auth bypass in n/a (high 7.8) - [CVE-2017-8915](https://insights.sbomify.com/CVE-2017-8915/): Denial of service in n/a (high 7.5) - [CVE-2017-8914](https://insights.sbomify.com/CVE-2017-8914/): Missing authorization in n/a (high 8.3) - [CVE-2017-8913](https://insights.sbomify.com/CVE-2017-8913/): XML external entity in n/a (high 8.8) - [CVE-2017-8912](https://insights.sbomify.com/CVE-2017-8912/): Code injection in n/a (high 7.2) - [CVE-2017-8911](https://insights.sbomify.com/CVE-2017-8911/): Integer overflow in n/a (critical 9.8) - [CVE-2017-8908](https://insights.sbomify.com/CVE-2017-8908/): Denial of service in n/a (medium 5.5) - [CVE-2017-8907](https://insights.sbomify.com/CVE-2017-8907/): Missing authorization in Atlassian Bamboo (high 8.8) - [CVE-2017-8906](https://insights.sbomify.com/CVE-2017-8906/): Integer overflow in n/a (medium 5.5) - [CVE-2017-8905](https://insights.sbomify.com/CVE-2017-8905/): Code injection in n/a (high 8.8) - [CVE-2017-8904](https://insights.sbomify.com/CVE-2017-8904/): Privilege escalation in n/a (high 8.8) - [CVE-2017-8903](https://insights.sbomify.com/CVE-2017-8903/): Privilege escalation in n/a (high 8.8) - [CVE-2017-8900](https://insights.sbomify.com/CVE-2017-8900/): Security feature bypass in n/a (medium 4.6) - [CVE-2017-8899](https://insights.sbomify.com/CVE-2017-8899/): Cross-site scripting in n/a (high 8.1) - [CVE-2017-8898](https://insights.sbomify.com/CVE-2017-8898/): Cross-site scripting in n/a (critical 9.8) - [CVE-2017-8897](https://insights.sbomify.com/CVE-2017-8897/): Cross-site scripting in n/a (medium 6.1) - [CVE-2017-8896](https://insights.sbomify.com/CVE-2017-8896/): Cross-site scripting in n/a (medium 6.1) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/10/