# Vulnerabilities published in 2017


- [CVE-2017-12364](https://insights.sbomify.com/CVE-2017-12364/): SQL injection in Cisco Prime Service Catalog (medium 6.5)
- [CVE-2017-12363](https://insights.sbomify.com/CVE-2017-12363/): Missing authorization in Cisco WebEx Meeting Server (medium 5.3)
- [CVE-2017-12362](https://insights.sbomify.com/CVE-2017-12362/): Denial of service in Cisco Meeting Server (medium 6.5)
- [CVE-2017-12361](https://insights.sbomify.com/CVE-2017-12361/): Weak cryptography in Cisco Jabber (medium 4.0)
- [CVE-2017-12360](https://insights.sbomify.com/CVE-2017-12360/): Denial of service in Cisco WebEx Network Recording Player (medium 4.3)
- [CVE-2017-1236](https://insights.sbomify.com/CVE-2017-1236/): Denial of service in MQ (medium 6.5)
- [CVE-2017-12359](https://insights.sbomify.com/CVE-2017-12359/): Memory corruption in Cisco WebEx Network Recording Player (medium 6.5)
- [CVE-2017-12358](https://insights.sbomify.com/CVE-2017-12358/): Cross-site scripting in Cisco Jabber (medium 5.4)
- [CVE-2017-12357](https://insights.sbomify.com/CVE-2017-12357/): Cross-site scripting in Cisco Unified Communications Manager (medium 5.4)
- [CVE-2017-12356](https://insights.sbomify.com/CVE-2017-12356/): Cross-site scripting in Cisco Jabber (medium 6.1)
- [CVE-2017-12355](https://insights.sbomify.com/CVE-2017-12355/): Denial of service in Cisco IOS XR (medium 5.3)
- [CVE-2017-12354](https://insights.sbomify.com/CVE-2017-12354/): Information disclosure in Cisco Secure Access Control System (medium 5.3)
- [CVE-2017-12353](https://insights.sbomify.com/CVE-2017-12353/): Security feature bypass in Cisco Email Security Appliance (medium 5.8)
- [CVE-2017-12352](https://insights.sbomify.com/CVE-2017-12352/): Command injection in Cisco Application Policy Infrastructure Controller (medium 6.7)
- [CVE-2017-12351](https://insights.sbomify.com/CVE-2017-12351/): Security feature bypass in Cisco NX-OS (medium 5.7)
- [CVE-2017-12350](https://insights.sbomify.com/CVE-2017-12350/): Hardcoded credentials in Cisco Umbrella Insights Virtual Appliance (high 8.2)
- [CVE-2017-1235](https://insights.sbomify.com/CVE-2017-1235/): Denial of service in MQ (medium 6.5)
- [CVE-2017-12349](https://insights.sbomify.com/CVE-2017-12349/): Cross-site scripting in Cisco UCS Central Software (medium 5.4)
- [CVE-2017-12348](https://insights.sbomify.com/CVE-2017-12348/): Cross-site scripting in Cisco UCS Central Software (medium 5.4)
- [CVE-2017-12347](https://insights.sbomify.com/CVE-2017-12347/): Cross-site scripting in Cisco Data Center Network Manager Software (medium 6.1)
- [CVE-2017-12346](https://insights.sbomify.com/CVE-2017-12346/): Cross-site scripting in Cisco Data Center Network Manager Software (medium 6.1)
- [CVE-2017-12345](https://insights.sbomify.com/CVE-2017-12345/): Cross-site scripting in Cisco Data Center Network Manager Software (medium 4.7)
- [CVE-2017-12344](https://insights.sbomify.com/CVE-2017-12344/): Cross-site scripting in Cisco Data Center Network Manager Software (medium 6.1)
- [CVE-2017-12343](https://insights.sbomify.com/CVE-2017-12343/): Cross-site scripting in Cisco Data Center Network Manager Software (high 8.8)
- [CVE-2017-12342](https://insights.sbomify.com/CVE-2017-12342/): Security feature bypass in Cisco Nexus Series Switches (medium 6.8)
- [CVE-2017-12341](https://insights.sbomify.com/CVE-2017-12341/): Command injection in Cisco NX-OS (medium 6.7)
- [CVE-2017-12340](https://insights.sbomify.com/CVE-2017-12340/): Security feature bypass in Cisco Multilayer Director, Nexus 7000 Series, and Nexus 7700 Series Switches (medium 4.2)
- [CVE-2017-1234](https://insights.sbomify.com/CVE-2017-1234/): Cross-site scripting in Security QRadar SIEM (medium 5.4)
- [CVE-2017-12339](https://insights.sbomify.com/CVE-2017-12339/): Command injection in Cisco NX-OS (medium 5.7)
- [CVE-2017-12338](https://insights.sbomify.com/CVE-2017-12338/): Path traversal in Cisco NX-OS (medium 6.0)
- [CVE-2017-12337](https://insights.sbomify.com/CVE-2017-12337/): Auth bypass in Cisco Voice Operating System (critical 9.8)
- [CVE-2017-12336](https://insights.sbomify.com/CVE-2017-12336/): Command injection in Cisco NX-OS (medium 4.2)
- [CVE-2017-12335](https://insights.sbomify.com/CVE-2017-12335/): Command injection in Cisco NX-OS (medium 6.3)
- [CVE-2017-12334](https://insights.sbomify.com/CVE-2017-12334/): Command injection in Cisco NX-OS (medium 6.7)
- [CVE-2017-12333](https://insights.sbomify.com/CVE-2017-12333/): Security feature bypass in Cisco NX-OS (medium 6.7)
- [CVE-2017-12332](https://insights.sbomify.com/CVE-2017-12332/): Path traversal in Cisco NX-OS (medium 4.4)
- [CVE-2017-12331](https://insights.sbomify.com/CVE-2017-12331/): Security feature bypass in Cisco NX-OS (medium 6.7)
- [CVE-2017-12330](https://insights.sbomify.com/CVE-2017-12330/): Command injection in Cisco Nexus Series Switches (medium 6.3)
- [CVE-2017-1233](https://insights.sbomify.com/CVE-2017-1233/): Privilege escalation in BigFix Remote Control (medium 6.7)
- [CVE-2017-12329](https://insights.sbomify.com/CVE-2017-12329/): Command injection in Cisco FXOS and NX-OS (medium 6.3)
- [CVE-2017-12328](https://insights.sbomify.com/CVE-2017-12328/): Denial of service in Cisco IP Phone 8800 Series (medium 5.8)
- [CVE-2017-12323](https://insights.sbomify.com/CVE-2017-12323/): Cross-site scripting in Cisco Registered Envelope Service (medium 6.1)
- [CVE-2017-12322](https://insights.sbomify.com/CVE-2017-12322/): Cross-site scripting in Cisco Registered Envelope Service (medium 6.1)
- [CVE-2017-12321](https://insights.sbomify.com/CVE-2017-12321/): Cross-site scripting in Cisco Registered Envelope Service (medium 6.1)
- [CVE-2017-12320](https://insights.sbomify.com/CVE-2017-12320/): Cross-site scripting in Cisco Registered Envelope Service (medium 6.1)
- [CVE-2017-1232](https://insights.sbomify.com/CVE-2017-1232/): Information disclosure in ibm:bigfix platform (medium 5.9)
- [CVE-2017-12319](https://insights.sbomify.com/CVE-2017-12319/): Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service (medium 5.9, exploited in the wild)
- [CVE-2017-12318](https://insights.sbomify.com/CVE-2017-12318/): Denial of service in Cisco RF Gateway 1 (high 7.5)
- [CVE-2017-12317](https://insights.sbomify.com/CVE-2017-12317/): Hardcoded credentials in Cisco AMP for Endpoints (medium 6.7)
- [CVE-2017-12316](https://insights.sbomify.com/CVE-2017-12316/): Security feature bypass in Cisco Identity Services Engine (high 7.5)
- [CVE-2017-12315](https://insights.sbomify.com/CVE-2017-12315/): Information disclosure in Cisco HyperFlex System (medium 6.0)
- [CVE-2017-12314](https://insights.sbomify.com/CVE-2017-12314/): Other in Cisco FindIT Discovery Utility (high 7.8)
- [CVE-2017-12313](https://insights.sbomify.com/CVE-2017-12313/): Other in Cisco Network Academy Packet Tracer (medium 6.7)
- [CVE-2017-12312](https://insights.sbomify.com/CVE-2017-12312/): Other in Cisco Immunet Antimalware Installer (medium 6.7)
- [CVE-2017-12311](https://insights.sbomify.com/CVE-2017-12311/): Denial of service in Cisco Meeting Server (medium 5.8)
- [CVE-2017-12310](https://insights.sbomify.com/CVE-2017-12310/): Information disclosure in Cisco Spark Hybrid Calendar Service (high 7.5)
- [CVE-2017-1231](https://insights.sbomify.com/CVE-2017-1231/): Information disclosure in BigFix Platform (medium 4.4)
- [CVE-2017-12309](https://insights.sbomify.com/CVE-2017-12309/): Other in Cisco Email Security Appliance (medium 5.3)
- [CVE-2017-12308](https://insights.sbomify.com/CVE-2017-12308/): Cross-site scripting in Cisco Small Business 300 and 500 Series Managed Switches (medium 6.1)
- [CVE-2017-12307](https://insights.sbomify.com/CVE-2017-12307/): Cross-site scripting in Cisco Small Business 300 and 500 Series Managed Switches (medium 6.1)
- [CVE-2017-12306](https://insights.sbomify.com/CVE-2017-12306/): Security feature bypass in Cisco Spark Board (medium 4.4)
- [CVE-2017-12305](https://insights.sbomify.com/CVE-2017-12305/): Command injection in Cisco IP Phone 8800 Series (medium 6.7)
- [CVE-2017-12304](https://insights.sbomify.com/CVE-2017-12304/): Cross-site scripting in Cisco IOS and IOS XE (medium 6.1)
- [CVE-2017-12303](https://insights.sbomify.com/CVE-2017-12303/): Security feature bypass in Cisco Web Security Appliance (medium 5.3)
- [CVE-2017-12302](https://insights.sbomify.com/CVE-2017-12302/): SQL injection in Cisco Unified Communications Manager (medium 4.3)
- [CVE-2017-12301](https://insights.sbomify.com/CVE-2017-12301/): Code injection in Cisco NX-OS Software (medium 6.7)
- [CVE-2017-12300](https://insights.sbomify.com/CVE-2017-12300/): Security feature bypass in Cisco Firepower System Software (medium 5.8)
- [CVE-2017-1230](https://insights.sbomify.com/CVE-2017-1230/): Weak cryptography in ibm:bigfix platform (medium 5.3)
- [CVE-2017-12299](https://insights.sbomify.com/CVE-2017-12299/): Security feature bypass in Cisco ASA Next-Generation Firewall Services (medium 5.3)
- [CVE-2017-12298](https://insights.sbomify.com/CVE-2017-12298/): Cross-site scripting in Cisco WebEx Meeting Center (medium 6.1)
- [CVE-2017-12297](https://insights.sbomify.com/CVE-2017-12297/): Server-side request forgery in Cisco WebEx Meeting Center (medium 5.0)
- [CVE-2017-12296](https://insights.sbomify.com/CVE-2017-12296/): Cross-site scripting in Cisco WebEx Meetings Server (medium 6.1)
- [CVE-2017-12295](https://insights.sbomify.com/CVE-2017-12295/): Information disclosure in Cisco WebEx Meetings Server (medium 5.3)
- [CVE-2017-12294](https://insights.sbomify.com/CVE-2017-12294/): Cross-site scripting in Cisco WebEx Meetings Server (medium 5.4)
- [CVE-2017-12293](https://insights.sbomify.com/CVE-2017-12293/): Denial of service in Cisco WebEx Meetings Server (high 8.6)
- [CVE-2017-12292](https://insights.sbomify.com/CVE-2017-12292/): Cross-site scripting in Cisco Registered Envelope Service (medium 6.1)
- [CVE-2017-12291](https://insights.sbomify.com/CVE-2017-12291/): Cross-site scripting in Cisco Registered Envelope Service (medium 6.1)
- [CVE-2017-12290](https://insights.sbomify.com/CVE-2017-12290/): Cross-site scripting in Cisco Registered Envelope Service (medium 6.1)
- [CVE-2017-1229](https://insights.sbomify.com/CVE-2017-1229/): Misconfiguration in BigFix family (medium 5.9)
- [CVE-2017-12289](https://insights.sbomify.com/CVE-2017-12289/): Information disclosure in Cisco IOS XE (medium 4.4)
- [CVE-2017-12288](https://insights.sbomify.com/CVE-2017-12288/): Cross-site scripting in Cisco Unified Contact Center Express (medium 6.1)
- [CVE-2017-12287](https://insights.sbomify.com/CVE-2017-12287/): Denial of service in Cisco Expressway Series and Cisco TelePresence Video Communication Server (medium 4.3)
- [CVE-2017-12286](https://insights.sbomify.com/CVE-2017-12286/): Information disclosure in Cisco Jabber (medium 5.5)
- [CVE-2017-12285](https://insights.sbomify.com/CVE-2017-12285/): Path traversal in Cisco Network Analysis Module (medium 5.3)
- [CVE-2017-12284](https://insights.sbomify.com/CVE-2017-12284/): Information disclosure in Cisco Jabber for Windows Client (medium 5.5)
- [CVE-2017-12283](https://insights.sbomify.com/CVE-2017-12283/): Denial of service in Cisco Aironet 3800 Series Access Points (medium 6.1)
- [CVE-2017-12282](https://insights.sbomify.com/CVE-2017-12282/): Memory corruption in Cisco Wireless LAN Controller (medium 6.1)
- [CVE-2017-12281](https://insights.sbomify.com/CVE-2017-12281/): Auth bypass in Cisco Aironet 1800, 2800, and 3800 Series Access Points (high 7.5)
- [CVE-2017-12280](https://insights.sbomify.com/CVE-2017-12280/): Memory corruption in Cisco Wireless LAN Controller (high 7.5)
- [CVE-2017-1228](https://insights.sbomify.com/CVE-2017-1228/): Information disclosure in ibm:bigfix platform (low 3.7)
- [CVE-2017-12279](https://insights.sbomify.com/CVE-2017-12279/): Information disclosure in Cisco IOS Software for Cisco Aironet Access Points (medium 4.3)
- [CVE-2017-12278](https://insights.sbomify.com/CVE-2017-12278/): Denial of service in Cisco Wireless LAN Controller (medium 6.3)
- [CVE-2017-12277](https://insights.sbomify.com/CVE-2017-12277/): Command injection in Cisco Firepower 4100 Series NGFW and Firepower 9300 Security Appliance (high 8.8)
- [CVE-2017-12276](https://insights.sbomify.com/CVE-2017-12276/): SQL injection in Cisco Prime Collaboration Provisioning (high 8.1)
- [CVE-2017-12275](https://insights.sbomify.com/CVE-2017-12275/): Denial of service in Cisco Wireless LAN Controller (high 7.4)
- [CVE-2017-12274](https://insights.sbomify.com/CVE-2017-12274/): Denial of service in Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms (medium 6.5)
- [CVE-2017-12273](https://insights.sbomify.com/CVE-2017-12273/): Denial of service in Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms (medium 6.5)
- [CVE-2017-12272](https://insights.sbomify.com/CVE-2017-12272/): Cross-site scripting in Cisco IOS XE (medium 6.1)
- [CVE-2017-12271](https://insights.sbomify.com/CVE-2017-12271/): Cross-site request forgery in Cisco SPA300 and SPA500 Series IP Phones (high 8.8)
- [CVE-2017-12270](https://insights.sbomify.com/CVE-2017-12270/): Denial of service in Cisco IOS XR (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/117/