# Vulnerabilities published in 2017 - [CVE-2017-1227](https://insights.sbomify.com/CVE-2017-1227/): Denial of service in BigFix Platform (high 7.5) - [CVE-2017-12269](https://insights.sbomify.com/CVE-2017-12269/): Cross-site scripting in Cisco Spark Messaging (medium 5.4) - [CVE-2017-12268](https://insights.sbomify.com/CVE-2017-12268/): Security feature bypass in Cisco AnyConnect Network Access Manager (medium 6.5) - [CVE-2017-12267](https://insights.sbomify.com/CVE-2017-12267/): Denial of service in Cisco Wide Area Application Services (medium 5.3) - [CVE-2017-12266](https://insights.sbomify.com/CVE-2017-12266/): Privilege escalation in Cisco Meeting App (medium 4.2) - [CVE-2017-12265](https://insights.sbomify.com/CVE-2017-12265/): Cross-site scripting in Cisco Adaptive Security Appliance Software (medium 6.1) - [CVE-2017-12264](https://insights.sbomify.com/CVE-2017-12264/): Denial of service in Cisco Meeting Server (medium 5.3) - [CVE-2017-12263](https://insights.sbomify.com/CVE-2017-12263/): Path traversal in Cisco License Manager (high 7.5) - [CVE-2017-12262](https://insights.sbomify.com/CVE-2017-12262/): Misconfiguration in Cisco Application Policy Infrastructure Controller Enterprise Module (high 8.8) - [CVE-2017-12261](https://insights.sbomify.com/CVE-2017-12261/): Privilege escalation in Cisco Identity Services Engine (high 7.8) - [CVE-2017-12260](https://insights.sbomify.com/CVE-2017-12260/): Denial of service in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones (high 7.5) - [CVE-2017-1226](https://insights.sbomify.com/CVE-2017-1226/): Information disclosure in ibm:bigfix platform (medium 4.3) - [CVE-2017-12259](https://insights.sbomify.com/CVE-2017-12259/): Memory corruption in Cisco Small Business SPA51x Series IP Phones (high 7.5) - [CVE-2017-12258](https://insights.sbomify.com/CVE-2017-12258/): Cross-site scripting in Cisco Unified Communications Manager (medium 6.1) - [CVE-2017-12257](https://insights.sbomify.com/CVE-2017-12257/): Cross-site scripting in Cisco WebEx Meetings Server (medium 6.1) - [CVE-2017-12256](https://insights.sbomify.com/CVE-2017-12256/): Denial of service in Cisco Wide Area Application Services (medium 6.5) - [CVE-2017-12255](https://insights.sbomify.com/CVE-2017-12255/): Command injection in Cisco UCS Central Software (medium 6.7) - [CVE-2017-12254](https://insights.sbomify.com/CVE-2017-12254/): Cross-site scripting in Cisco Unified Intelligence Center (medium 6.1) - [CVE-2017-12253](https://insights.sbomify.com/CVE-2017-12253/): Cross-site request forgery in Cisco Unified Intelligence Center (high 8.8) - [CVE-2017-12252](https://insights.sbomify.com/CVE-2017-12252/): Other in Cisco FindIT (high 7.8) - [CVE-2017-12251](https://insights.sbomify.com/CVE-2017-12251/): Auth bypass in Cisco Cloud Services Platform 2100 (critical 9.9) - [CVE-2017-12250](https://insights.sbomify.com/CVE-2017-12250/): Denial of service in Cisco Wide Area Application Services (medium 5.3) - [CVE-2017-1225](https://insights.sbomify.com/CVE-2017-1225/): Information disclosure in ibm:bigfix platform (medium 5.3) - [CVE-2017-12249](https://insights.sbomify.com/CVE-2017-12249/): Misconfiguration in Cisco Meeting Server (critical 9.1) - [CVE-2017-12248](https://insights.sbomify.com/CVE-2017-12248/): Cross-site scripting in Cisco Unified Intelligence Center (medium 6.1) - [CVE-2017-12246](https://insights.sbomify.com/CVE-2017-12246/): Denial of service in Cisco Adaptive Security Appliance Software (high 8.6) - [CVE-2017-12245](https://insights.sbomify.com/CVE-2017-12245/): Denial of service in Cisco Firepower Detection Engine (high 8.6) - [CVE-2017-12244](https://insights.sbomify.com/CVE-2017-12244/): Denial of service in Cisco Firepower Detection Engine (high 8.6) - [CVE-2017-12243](https://insights.sbomify.com/CVE-2017-12243/): Command injection in Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance (high 7.8) - [CVE-2017-12240](https://insights.sbomify.com/CVE-2017-12240/): Cisco IOS and IOS XE Software DHCP Remote Code Execution (critical 9.8, exploited in the wild) - [CVE-2017-1224](https://insights.sbomify.com/CVE-2017-1224/): Weak cryptography in BigFix family (high 7.5) - [CVE-2017-12239](https://insights.sbomify.com/CVE-2017-12239/): Hardcoded credentials in Cisco IOS XE (medium 6.8) - [CVE-2017-12238](https://insights.sbomify.com/CVE-2017-12238/): Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service (medium 6.5, exploited in the wild) - [CVE-2017-12237](https://insights.sbomify.com/CVE-2017-12237/): Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service (high 7.5, exploited in the wild) - [CVE-2017-12236](https://insights.sbomify.com/CVE-2017-12236/): Auth bypass in Cisco IOS XE (critical 9.8) - [CVE-2017-12235](https://insights.sbomify.com/CVE-2017-12235/): Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service (high 7.5, exploited in the wild) - [CVE-2017-12234](https://insights.sbomify.com/CVE-2017-12234/): Cisco IOS Software Common Industrial Protocol Request Denial-of-Service (high 7.5, exploited in the wild) - [CVE-2017-12233](https://insights.sbomify.com/CVE-2017-12233/): Cisco IOS Software Common Industrial Protocol Request Denial-of-Service (high 7.5, exploited in the wild) - [CVE-2017-12232](https://insights.sbomify.com/CVE-2017-12232/): Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service (medium 6.5, exploited in the wild) - [CVE-2017-12231](https://insights.sbomify.com/CVE-2017-12231/): Cisco IOS Software Network Address Translation Denial-of-Service (high 7.5, exploited in the wild) - [CVE-2017-12230](https://insights.sbomify.com/CVE-2017-12230/): Privilege escalation in Cisco IOS XE (high 8.8) - [CVE-2017-1223](https://insights.sbomify.com/CVE-2017-1223/): Open redirect in BigFix family (medium 6.1) - [CVE-2017-12229](https://insights.sbomify.com/CVE-2017-12229/): Auth bypass in Cisco IOS XE (critical 9.8) - [CVE-2017-12228](https://insights.sbomify.com/CVE-2017-12228/): Security feature bypass in Cisco IOS and IOS XE (medium 5.9) - [CVE-2017-12227](https://insights.sbomify.com/CVE-2017-12227/): SQL injection in Cisco Emergency Responder (medium 5.4) - [CVE-2017-12226](https://insights.sbomify.com/CVE-2017-12226/): Privilege escalation in Cisco IOS XE (high 8.8) - [CVE-2017-12225](https://insights.sbomify.com/CVE-2017-12225/): Auth bypass in Cisco Prime LAN Management Solution (medium 6.5) - [CVE-2017-12224](https://insights.sbomify.com/CVE-2017-12224/): Security feature bypass in Cisco Meeting Server (medium 6.5) - [CVE-2017-12223](https://insights.sbomify.com/CVE-2017-12223/): Security feature bypass in Cisco IR800 Integrated Services Router (medium 6.4) - [CVE-2017-12222](https://insights.sbomify.com/CVE-2017-12222/): Denial of service in Cisco IOS XE (medium 6.5) - [CVE-2017-12221](https://insights.sbomify.com/CVE-2017-12221/): Cross-site scripting in Cisco Firepower Management Center (medium 5.4) - [CVE-2017-12220](https://insights.sbomify.com/CVE-2017-12220/): Cross-site scripting in Cisco Firepower Management Center (medium 6.1) - [CVE-2017-1222](https://insights.sbomify.com/CVE-2017-1222/): Auth bypass in ibm:bigfix platform (medium 6.5) - [CVE-2017-12219](https://insights.sbomify.com/CVE-2017-12219/): Denial of service in Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones (high 7.5) - [CVE-2017-12218](https://insights.sbomify.com/CVE-2017-12218/): Security feature bypass in Cisco Email Security Appliance (medium 5.8) - [CVE-2017-12217](https://insights.sbomify.com/CVE-2017-12217/): Denial of service in Cisco ASR 5500 System Architecture Evolution Gateway (medium 5.3) - [CVE-2017-12216](https://insights.sbomify.com/CVE-2017-12216/): XML external entity in Cisco SocialMiner (high 8.8) - [CVE-2017-12215](https://insights.sbomify.com/CVE-2017-12215/): Denial of service in Cisco Email Security Appliance (high 7.1) - [CVE-2017-12214](https://insights.sbomify.com/CVE-2017-12214/): Privilege escalation in Cisco Unified Customer Voice Portal (high 8.8) - [CVE-2017-12213](https://insights.sbomify.com/CVE-2017-12213/): Auth bypass in Cisco Catalyst 4000 Series Switches (medium 4.3) - [CVE-2017-12212](https://insights.sbomify.com/CVE-2017-12212/): Cross-site scripting in Cisco Unity Connection (medium 6.1) - [CVE-2017-12211](https://insights.sbomify.com/CVE-2017-12211/): Denial of service in Cisco IOS and Cisco IOS XE (medium 5.3) - [CVE-2017-1221](https://insights.sbomify.com/CVE-2017-1221/): Misconfiguration in BigFix Platform (critical 9.8) - [CVE-2017-12200](https://insights.sbomify.com/CVE-2017-12200/): Cross-site scripting in etoilewebdesign:ultimate product catalog (medium 6.1) - [CVE-2017-1220](https://insights.sbomify.com/CVE-2017-1220/): Information disclosure in ibm:bigfix platform (medium 5.3) - [CVE-2017-12199](https://insights.sbomify.com/CVE-2017-12199/): SQL injection in etoilewebdesign:ultimate product catalog (critical 9.8) - [CVE-2017-12197](https://insights.sbomify.com/CVE-2017-12197/): Improper Input Validation in libpam4j (medium 6.5) - [CVE-2017-12196](https://insights.sbomify.com/CVE-2017-12196/): Incorrect Authorization in Undertow (medium 4.8) - [CVE-2017-12195](https://insights.sbomify.com/CVE-2017-12195/): Auth bypass in OpenShift (medium 6.5) - [CVE-2017-12194](https://insights.sbomify.com/CVE-2017-12194/): Memory corruption in spice-gtk (critical 9.8) - [CVE-2017-12193](https://insights.sbomify.com/CVE-2017-12193/): Null dereference in Linux kernel since 3.13 up to 4.14 (not including) (medium 5.5) - [CVE-2017-12192](https://insights.sbomify.com/CVE-2017-12192/): Null dereference in linux:linux kernel (medium 5.5) - [CVE-2017-12191](https://insights.sbomify.com/CVE-2017-12191/): Misconfiguration in CloudForms (high 7.4) - [CVE-2017-12190](https://insights.sbomify.com/CVE-2017-12190/): Denial of service in Linux kernel through v4.14-rc5 (medium 6.5) - [CVE-2017-1219](https://insights.sbomify.com/CVE-2017-1219/): XML external entity in BigFix family (medium 6.5) - [CVE-2017-12189](https://insights.sbomify.com/CVE-2017-12189/): Privilege escalation in Red Hat JBoss Enterprise Application Platform (high 7.8) - [CVE-2017-12188](https://insights.sbomify.com/CVE-2017-12188/): Memory corruption in Linux kernel (high 7.8) - [CVE-2017-12187](https://insights.sbomify.com/CVE-2017-12187/): Memory corruption in xorg-x11-server (critical 9.8) - [CVE-2017-12186](https://insights.sbomify.com/CVE-2017-12186/): Memory corruption in xorg-x11-server (critical 9.8) - [CVE-2017-12185](https://insights.sbomify.com/CVE-2017-12185/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-12184](https://insights.sbomify.com/CVE-2017-12184/): Memory corruption in xorg-x11-server (critical 9.8) - [CVE-2017-12183](https://insights.sbomify.com/CVE-2017-12183/): Memory corruption in xorg-x11-server (critical 9.8) - [CVE-2017-12182](https://insights.sbomify.com/CVE-2017-12182/): Memory corruption in xorg-x11-server (critical 9.8) - [CVE-2017-12181](https://insights.sbomify.com/CVE-2017-12181/): Memory corruption in xorg-x11-server (critical 9.8) - [CVE-2017-12180](https://insights.sbomify.com/CVE-2017-12180/): Memory corruption in xorg-x11-server (critical 9.8) - [CVE-2017-1218](https://insights.sbomify.com/CVE-2017-1218/): Cross-site request forgery in BigFix family (high 8.8) - [CVE-2017-12179](https://insights.sbomify.com/CVE-2017-12179/): Integer overflow in xorg-x11-server (critical 9.8) - [CVE-2017-12178](https://insights.sbomify.com/CVE-2017-12178/): Memory corruption in xorg-x11-server (critical 9.8) - [CVE-2017-12177](https://insights.sbomify.com/CVE-2017-12177/): Integer overflow in xorg-x11-server (critical 9.8) - [CVE-2017-12176](https://insights.sbomify.com/CVE-2017-12176/): Memory corruption in xorg-x11-server (critical 9.8) - [CVE-2017-12175](https://insights.sbomify.com/CVE-2017-12175/): Cross-site scripting in Satellite (low 3.5) - [CVE-2017-12174](https://insights.sbomify.com/CVE-2017-12174/): Uncontrolled Resource Consumption in Artemis and HornetQ (high 7.5) - [CVE-2017-12173](https://insights.sbomify.com/CVE-2017-12173/): Information disclosure in sssd (medium 4.3) - [CVE-2017-12172](https://insights.sbomify.com/CVE-2017-12172/): Privilege escalation in postgresql (medium 6.7) - [CVE-2017-12171](https://insights.sbomify.com/CVE-2017-12171/): Security feature bypass in httpd (medium 6.5) - [CVE-2017-12170](https://insights.sbomify.com/CVE-2017-12170/): Misconfiguration in pure-ftpd (critical 9.8) - [CVE-2017-1217](https://insights.sbomify.com/CVE-2017-1217/): Cross-site scripting in WebSphere Portal (medium 6.1) - [CVE-2017-12169](https://insights.sbomify.com/CVE-2017-12169/): Information disclosure in ipa (high 7.5) - [CVE-2017-12168](https://insights.sbomify.com/CVE-2017-12168/): Denial of service in Linux kernel before 4.9 (medium 6.0) - [CVE-2017-12167](https://insights.sbomify.com/CVE-2017-12167/): Information disclosure in EAP-7 (medium 5.5) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/118/