# Vulnerabilities published in 2017


- [CVE-2017-12068](https://insights.sbomify.com/CVE-2017-12068/): Cross-site scripting in event list project:event list (medium 6.1)
- [CVE-2017-12067](https://insights.sbomify.com/CVE-2017-12067/): Memory corruption in potrace project:potrace (high 7.5)
- [CVE-2017-12066](https://insights.sbomify.com/CVE-2017-12066/): Cross-site scripting in cacti:cacti (medium 5.4)
- [CVE-2017-12065](https://insights.sbomify.com/CVE-2017-12065/): Code injection in cacti:cacti (critical 9.8)
- [CVE-2017-12064](https://insights.sbomify.com/CVE-2017-12064/): Security feature bypass in open-emr:openemr (high 7.5)
- [CVE-2017-12062](https://insights.sbomify.com/CVE-2017-12062/): MantisBT vulnerable to XSS via unsanitized filter field in manage_user_page.php (medium 6.1)
- [CVE-2017-12061](https://insights.sbomify.com/CVE-2017-12061/): MantisBT XSS allows unsanitized input via admin/install.php (medium 6.1)
- [CVE-2017-1205](https://insights.sbomify.com/CVE-2017-1205/): Privilege escalation in Spectrum LSF (high 8.8)
- [CVE-2017-1204](https://insights.sbomify.com/CVE-2017-1204/): Hardcoded credentials in Tealeaf Customer Experience (critical 9.8)
- [CVE-2017-1203](https://insights.sbomify.com/CVE-2017-1203/): Cross-site scripting in BigFix family (medium 6.1)
- [CVE-2017-1202](https://insights.sbomify.com/CVE-2017-1202/): Cross-site scripting in BigFix Compliance (medium 5.4)
- [CVE-2017-1201](https://insights.sbomify.com/CVE-2017-1201/): Information disclosure in BigFix Compliance Analytics (high 7.8)
- [CVE-2017-1200](https://insights.sbomify.com/CVE-2017-1200/): Security feature bypass in BigFix Compliance (low 3.7)
- [CVE-2017-1199](https://insights.sbomify.com/CVE-2017-1199/): Cross-site scripting in InfoSphere Master Data Management (medium 5.4)
- [CVE-2017-1198](https://insights.sbomify.com/CVE-2017-1198/): Information disclosure in BigFix Compliance (low 3.7)
- [CVE-2017-1197](https://insights.sbomify.com/CVE-2017-1197/): Auth bypass in BigFix Compliance Analytics (critical 9.8)
- [CVE-2017-1196](https://insights.sbomify.com/CVE-2017-1196/): Misconfiguration in Endpoint Manager for Security and Compliance (critical 9.8)
- [CVE-2017-1195](https://insights.sbomify.com/CVE-2017-1195/): Open redirect in Cram Social Program Management (medium 6.1)
- [CVE-2017-11940](https://insights.sbomify.com/CVE-2017-11940/): Memory corruption in Microsoft Malware Protection Engine (high 7.8)
- [CVE-2017-1194](https://insights.sbomify.com/CVE-2017-1194/): Cross-site request forgery in IBM WebSphere Application Server (high 8.8)
- [CVE-2017-11939](https://insights.sbomify.com/CVE-2017-11939/): Information disclosure in Microsoft Office (medium 6.5)
- [CVE-2017-11937](https://insights.sbomify.com/CVE-2017-11937/): Memory corruption in Microsoft Malware Protection Engine (high 7.8)
- [CVE-2017-11936](https://insights.sbomify.com/CVE-2017-11936/): Privilege escalation in Microsoft SharePoint (high 8.8)
- [CVE-2017-11935](https://insights.sbomify.com/CVE-2017-11935/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2017-11934](https://insights.sbomify.com/CVE-2017-11934/): Information disclosure in Microsoft Office (medium 5.5)
- [CVE-2017-11932](https://insights.sbomify.com/CVE-2017-11932/): Other in Microsoft Exchange Server (high 8.1)
- [CVE-2017-11930](https://insights.sbomify.com/CVE-2017-11930/): Memory corruption in ChakraCore, Internet Explorer (high 7.5)
- [CVE-2017-1193](https://insights.sbomify.com/CVE-2017-1193/): Information disclosure in Sterling B2B Integrator (medium 6.5)
- [CVE-2017-11927](https://insights.sbomify.com/CVE-2017-11927/): Information disclosure in Microsoft Windows (medium 6.5)
- [CVE-2017-1192](https://insights.sbomify.com/CVE-2017-1192/): XML external entity in Sterling B2B Integrator (high 8.2)
- [CVE-2017-11919](https://insights.sbomify.com/CVE-2017-11919/): Information disclosure in ChakraCore, Internet Explorer, Microsoft Edge (medium 5.3)
- [CVE-2017-11918](https://insights.sbomify.com/CVE-2017-11918/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11916](https://insights.sbomify.com/CVE-2017-11916/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11914](https://insights.sbomify.com/CVE-2017-11914/): ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction (high 7.5)
- [CVE-2017-11913](https://insights.sbomify.com/CVE-2017-11913/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-11912](https://insights.sbomify.com/CVE-2017-11912/): Memory corruption in ChakraCore, Microsoft Edge, Internet Explorer (high 7.5)
- [CVE-2017-11911](https://insights.sbomify.com/CVE-2017-11911/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11910](https://insights.sbomify.com/CVE-2017-11910/): ChakraCore vulnerable to remote code execution due to insufficient InlineCache check (high 7.5)
- [CVE-2017-1191](https://insights.sbomify.com/CVE-2017-1191/): Missing authorization in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2017-11909](https://insights.sbomify.com/CVE-2017-11909/): ChakraCore vulnerable to remote code execution (high 7.5)
- [CVE-2017-11908](https://insights.sbomify.com/CVE-2017-11908/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11907](https://insights.sbomify.com/CVE-2017-11907/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-11906](https://insights.sbomify.com/CVE-2017-11906/): Information disclosure in Internet Explorer (medium 5.3)
- [CVE-2017-11905](https://insights.sbomify.com/CVE-2017-11905/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11903](https://insights.sbomify.com/CVE-2017-11903/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-11901](https://insights.sbomify.com/CVE-2017-11901/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-1190](https://insights.sbomify.com/CVE-2017-1190/): Code injection in Emptoris Strategic Supply Management (medium 6.4)
- [CVE-2017-11899](https://insights.sbomify.com/CVE-2017-11899/): Security feature bypass in Device Guard (critical 9.8)
- [CVE-2017-11895](https://insights.sbomify.com/CVE-2017-11895/): Memory corruption in ChakraCore, Microsoft Edge, Internet Explorer (high 7.5)
- [CVE-2017-11894](https://insights.sbomify.com/CVE-2017-11894/): Memory corruption in ChakraCore, Microsoft Edge, Internet Explorer (high 7.5)
- [CVE-2017-11893](https://insights.sbomify.com/CVE-2017-11893/): ChakraCore vulnerable to remote code execution (high 7.5)
- [CVE-2017-11890](https://insights.sbomify.com/CVE-2017-11890/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-1189](https://insights.sbomify.com/CVE-2017-1189/): Cross-site scripting in ibm:websphere portal (medium 6.1)
- [CVE-2017-11889](https://insights.sbomify.com/CVE-2017-11889/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11888](https://insights.sbomify.com/CVE-2017-11888/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-11887](https://insights.sbomify.com/CVE-2017-11887/): Information disclosure in Internet Explorer (medium 5.3)
- [CVE-2017-11886](https://insights.sbomify.com/CVE-2017-11886/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-11885](https://insights.sbomify.com/CVE-2017-11885/): Other in Microsoft Windows (medium 6.6)
- [CVE-2017-11884](https://insights.sbomify.com/CVE-2017-11884/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2017-11883](https://insights.sbomify.com/CVE-2017-11883/): Denial of service in ASP.NET Core (high 7.5)
- [CVE-2017-11882](https://insights.sbomify.com/CVE-2017-11882/): Microsoft Office Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2017-11880](https://insights.sbomify.com/CVE-2017-11880/): Information disclosure in Windows Kernel (medium 4.7)
- [CVE-2017-11879](https://insights.sbomify.com/CVE-2017-11879/): Open redirect in ASP.NET Core (high 8.8)
- [CVE-2017-11878](https://insights.sbomify.com/CVE-2017-11878/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2017-11877](https://insights.sbomify.com/CVE-2017-11877/): Security feature bypass in Microsoft Office (medium 5.5)
- [CVE-2017-11876](https://insights.sbomify.com/CVE-2017-11876/): Cross-site request forgery in Microsoft Server (high 8.8)
- [CVE-2017-11874](https://insights.sbomify.com/CVE-2017-11874/): Security feature bypass in Microsoft Edge (low 3.1)
- [CVE-2017-11873](https://insights.sbomify.com/CVE-2017-11873/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11872](https://insights.sbomify.com/CVE-2017-11872/): Security feature bypass in Microsoft Edge (medium 6.5)
- [CVE-2017-11871](https://insights.sbomify.com/CVE-2017-11871/): Chakra Core vulnerable to privilege escalation due to reading an invalid pointer (high 7.5)
- [CVE-2017-11870](https://insights.sbomify.com/CVE-2017-11870/): Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects (high 7.5)
- [CVE-2017-11869](https://insights.sbomify.com/CVE-2017-11869/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-11866](https://insights.sbomify.com/CVE-2017-11866/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11863](https://insights.sbomify.com/CVE-2017-11863/): Security feature bypass in Microsoft Edge (medium 6.1)
- [CVE-2017-11862](https://insights.sbomify.com/CVE-2017-11862/): Chakra Core vulnerable to privilege escalation due to type confusion (high 7.5)
- [CVE-2017-11861](https://insights.sbomify.com/CVE-2017-11861/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11858](https://insights.sbomify.com/CVE-2017-11858/): Memory corruption in ChakraCore, Microsoft Edge, Internet Explorer (high 7.5)
- [CVE-2017-11856](https://insights.sbomify.com/CVE-2017-11856/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-11855](https://insights.sbomify.com/CVE-2017-11855/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-11854](https://insights.sbomify.com/CVE-2017-11854/): Memory corruption in Microsoft Office (high 8.8)
- [CVE-2017-11853](https://insights.sbomify.com/CVE-2017-11853/): Information disclosure in Windows kernel (medium 5.5)
- [CVE-2017-11852](https://insights.sbomify.com/CVE-2017-11852/): Information disclosure in GDI (medium 4.7)
- [CVE-2017-11851](https://insights.sbomify.com/CVE-2017-11851/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2017-11850](https://insights.sbomify.com/CVE-2017-11850/): Information disclosure in Microsoft Graphics Component (low 2.5)
- [CVE-2017-11849](https://insights.sbomify.com/CVE-2017-11849/): Information disclosure in Windows Kernel (medium 4.7)
- [CVE-2017-11848](https://insights.sbomify.com/CVE-2017-11848/): Information disclosure in Internet Explorer (medium 4.3)
- [CVE-2017-11847](https://insights.sbomify.com/CVE-2017-11847/): Privilege escalation in Windows kernel (high 7.8)
- [CVE-2017-11846](https://insights.sbomify.com/CVE-2017-11846/): Memory corruption in ChakraCore, Microsoft Edge, Internet Explorer (high 7.5)
- [CVE-2017-11845](https://insights.sbomify.com/CVE-2017-11845/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-11844](https://insights.sbomify.com/CVE-2017-11844/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2017-11843](https://insights.sbomify.com/CVE-2017-11843/): Memory corruption in ChakraCore, Microsoft Edge, Internet Explorer (high 7.5)
- [CVE-2017-11842](https://insights.sbomify.com/CVE-2017-11842/): Information disclosure in Windows Kernel (medium 4.7)
- [CVE-2017-11841](https://insights.sbomify.com/CVE-2017-11841/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11840](https://insights.sbomify.com/CVE-2017-11840/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11839](https://insights.sbomify.com/CVE-2017-11839/): Memory corruption in microsoft:edge (high 7.5)
- [CVE-2017-11838](https://insights.sbomify.com/CVE-2017-11838/): Memory corruption in ChakraCore, Microsoft Edge, Internet Explorer (high 7.5)
- [CVE-2017-11837](https://insights.sbomify.com/CVE-2017-11837/): Memory corruption in ChakraCore, Microsoft Edge, Internet Explorer (high 7.5)
- [CVE-2017-11836](https://insights.sbomify.com/CVE-2017-11836/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11835](https://insights.sbomify.com/CVE-2017-11835/): Information disclosure in Microsoft Graphics (medium 5.5)
- [CVE-2017-11834](https://insights.sbomify.com/CVE-2017-11834/): Information disclosure in Internet Explorer (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/120/