# Vulnerabilities published in 2017


- [CVE-2017-8117](https://insights.sbomify.com/CVE-2017-8117/): Privilege escalation in UMA (critical 9.8)
- [CVE-2017-8116](https://insights.sbomify.com/CVE-2017-8116/): Command injection in n/a (critical 9.8)
- [CVE-2017-8115](https://insights.sbomify.com/CVE-2017-8115/): Path traversal in n/a (medium 5.3)
- [CVE-2017-8114](https://insights.sbomify.com/CVE-2017-8114/): Privilege escalation in n/a (high 8.8)
- [CVE-2017-8112](https://insights.sbomify.com/CVE-2017-8112/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8110](https://insights.sbomify.com/CVE-2017-8110/): XML external entity in n/a (critical 10.0)
- [CVE-2017-8109](https://insights.sbomify.com/CVE-2017-8109/): SaltStack Salt Information Exposure (high 7.8)
- [CVE-2017-8108](https://insights.sbomify.com/CVE-2017-8108/): Path traversal in n/a (high 7.8)
- [CVE-2017-8106](https://insights.sbomify.com/CVE-2017-8106/): Null dereference in n/a (medium 5.5)
- [CVE-2017-8105](https://insights.sbomify.com/CVE-2017-8105/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-8104](https://insights.sbomify.com/CVE-2017-8104/): Path traversal in n/a (medium 5.3)
- [CVE-2017-8103](https://insights.sbomify.com/CVE-2017-8103/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-8102](https://insights.sbomify.com/CVE-2017-8102/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-8101](https://insights.sbomify.com/CVE-2017-8101/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-8100](https://insights.sbomify.com/CVE-2017-8100/): There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings. (medium 6.5)
- [CVE-2017-8099](https://insights.sbomify.com/CVE-2017-8099/): Cross-site request forgery in n/a (high 8.1)
- [CVE-2017-8098](https://insights.sbomify.com/CVE-2017-8098/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2017-8087](https://insights.sbomify.com/CVE-2017-8087/): Information disclosure in n/a (low 2.4)
- [CVE-2017-8086](https://insights.sbomify.com/CVE-2017-8086/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8085](https://insights.sbomify.com/CVE-2017-8085/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-8083](https://insights.sbomify.com/CVE-2017-8083/): Security feature bypass in n/a (medium 6.7)
- [CVE-2017-8082](https://insights.sbomify.com/CVE-2017-8082/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2017-8081](https://insights.sbomify.com/CVE-2017-8081/): Weak cryptography in n/a (high 8.8)
- [CVE-2017-8080](https://insights.sbomify.com/CVE-2017-8080/): File upload in n/a (high 8.8)
- [CVE-2017-8078](https://insights.sbomify.com/CVE-2017-8078/): Missing authorization in n/a (medium 5.3)
- [CVE-2017-8077](https://insights.sbomify.com/CVE-2017-8077/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2017-8076](https://insights.sbomify.com/CVE-2017-8076/): Weak cryptography in n/a (critical 9.8)
- [CVE-2017-8075](https://insights.sbomify.com/CVE-2017-8075/): Information disclosure in n/a (critical 9.8)
- [CVE-2017-8074](https://insights.sbomify.com/CVE-2017-8074/): Information disclosure in n/a (critical 9.8)
- [CVE-2017-8073](https://insights.sbomify.com/CVE-2017-8073/): Memory corruption in n/a (high 7.5)
- [CVE-2017-8072](https://insights.sbomify.com/CVE-2017-8072/): Other in n/a (high 7.8)
- [CVE-2017-8071](https://insights.sbomify.com/CVE-2017-8071/): Denial of service in n/a (medium 5.5)
- [CVE-2017-8070](https://insights.sbomify.com/CVE-2017-8070/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8069](https://insights.sbomify.com/CVE-2017-8069/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8068](https://insights.sbomify.com/CVE-2017-8068/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8067](https://insights.sbomify.com/CVE-2017-8067/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8066](https://insights.sbomify.com/CVE-2017-8066/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8065](https://insights.sbomify.com/CVE-2017-8065/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8064](https://insights.sbomify.com/CVE-2017-8064/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8063](https://insights.sbomify.com/CVE-2017-8063/): Denial of service in n/a (high 7.8)
- [CVE-2017-8062](https://insights.sbomify.com/CVE-2017-8062/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8061](https://insights.sbomify.com/CVE-2017-8061/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8060](https://insights.sbomify.com/CVE-2017-8060/): Weak cryptography in n/a (medium 5.9)
- [CVE-2017-8059](https://insights.sbomify.com/CVE-2017-8059/): Security feature bypass in n/a (high 8.1)
- [CVE-2017-8058](https://insights.sbomify.com/CVE-2017-8058/): Security feature bypass in n/a (medium 5.9)
- [CVE-2017-8057](https://insights.sbomify.com/CVE-2017-8057/): Information disclosure in n/a (medium 5.3)
- [CVE-2017-8056](https://insights.sbomify.com/CVE-2017-8056/): XML external entity in n/a (medium 5.3)
- [CVE-2017-8055](https://insights.sbomify.com/CVE-2017-8055/): Information disclosure in n/a (medium 5.3)
- [CVE-2017-8054](https://insights.sbomify.com/CVE-2017-8054/): Denial of service in n/a (medium 5.5)
- [CVE-2017-8053](https://insights.sbomify.com/CVE-2017-8053/): Denial of service in n/a (medium 5.5)
- [CVE-2017-8052](https://insights.sbomify.com/CVE-2017-8052/): Craft CMS XSS Vulnerability (medium 6.1)
- [CVE-2017-8051](https://insights.sbomify.com/CVE-2017-8051/): Command injection in n/a (critical 9.8)
- [CVE-2017-8050](https://insights.sbomify.com/CVE-2017-8050/): Missing authorization in n/a (high 7.5)
- [CVE-2017-8048](https://insights.sbomify.com/CVE-2017-8048/): Code injection in Cloud Controller VM capi-release versions 1.33.0 and later, prior to 1.42.0, cf-release versions 268 and later, prior to 274 (high 7.8)
- [CVE-2017-8047](https://insights.sbomify.com/CVE-2017-8047/): Open redirect in Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274 (medium 6.1)
- [CVE-2017-8046](https://insights.sbomify.com/CVE-2017-8046/): Remote code execution in PATCH requests in Spring Data REST (critical 9.8)
- [CVE-2017-8045](https://insights.sbomify.com/CVE-2017-8045/): Deserialization of Untrusted Data in Spring AMQP (critical 9.8)
- [CVE-2017-8044](https://insights.sbomify.com/CVE-2017-8044/): Cross-site scripting in Single Sign-On for PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3 (medium 6.1)
- [CVE-2017-8041](https://insights.sbomify.com/CVE-2017-8041/): Cross-site scripting in PCF Single Sign-On for PCF:1.3.x versions prior to 1.3.4, 1.4.x versions prior to 1.4.3 (medium 6.1)
- [CVE-2017-8040](https://insights.sbomify.com/CVE-2017-8040/): XML external entity in PCF Single Sign-On for PCF:1.3.x versions prior to 1.3.4, 1.4.x versions prior to 1.4.3 (medium 6.5)
- [CVE-2017-8039](https://insights.sbomify.com/CVE-2017-8039/): Insecure Default Initialization of Resource in Pivotal Spring Web Flow (medium 5.9)
- [CVE-2017-8038](https://insights.sbomify.com/CVE-2017-8038/): Missing authorization in Credhub Credhub-release version 1.1.0 only (high 8.8)
- [CVE-2017-8037](https://insights.sbomify.com/CVE-2017-8037/): Information disclosure in Cloud Foundry (high 7.5)
- [CVE-2017-8036](https://insights.sbomify.com/CVE-2017-8036/): Code injection in Cloud Controller API CAPI-release version 1.33.0 only (high 7.8)
- [CVE-2017-8035](https://insights.sbomify.com/CVE-2017-8035/): Path traversal in Cloud Controller (high 7.5)
- [CVE-2017-8034](https://insights.sbomify.com/CVE-2017-8034/): Auth bypass in Cloud Foundry (medium 6.6)
- [CVE-2017-8033](https://insights.sbomify.com/CVE-2017-8033/): Path traversal in Cloud Controller API CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268 (high 7.8)
- [CVE-2017-8032](https://insights.sbomify.com/CVE-2017-8032/): Cloud Foundry UAA Identity Zone Admin Privilege Escalation (medium 6.6)
- [CVE-2017-8031](https://insights.sbomify.com/CVE-2017-8031/): Cloud Foundry UAA Denial of Service through client token revocation endpoint (medium 5.3)
- [CVE-2017-8028](https://insights.sbomify.com/CVE-2017-8028/): Improper Authentication in Pivotal Spring-LDAP (high 8.1)
- [CVE-2017-8025](https://insights.sbomify.com/CVE-2017-8025/): File upload in RSA Archer GRC Platform prior to 6.2.0.5 (high 7.4)
- [CVE-2017-8024](https://insights.sbomify.com/CVE-2017-8024/): Cross-site scripting in EMC Isilon OneFS EMC Isilon OneFS versions prior to 8.1.0.1, EMC Isilon OneFS versions prior to 8.0.1.2, EMC Isilon OneFS versions prior to 8.0.0.6, EMC Isilon OneFS 7.2.1.x (medium 6.1)
- [CVE-2017-8023](https://insights.sbomify.com/CVE-2017-8023/): EMC Networker Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2017-8022](https://insights.sbomify.com/CVE-2017-8022/): Memory corruption in EMC NetWorker prior to 8.2.4.9, 9.0.x (all supported versions), prior to 9.1.1.3, prior to 9.2.0.4 (high 8.1)
- [CVE-2017-8021](https://insights.sbomify.com/CVE-2017-8021/): EMC Elastic Cloud Storage (ECS) before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malic (critical 9.8)
- [CVE-2017-8020](https://insights.sbomify.com/CVE-2017-8020/): Memory corruption in EMC ScaleIO EMC ScaleIO 2.0.1.x version family (2.0.1.3, 2.0.1.2, 2.0.1.1, 2.0.1) (critical 9.8)
- [CVE-2017-8019](https://insights.sbomify.com/CVE-2017-8019/): Denial of service in EMC ScaleIO EMC ScaleIO 2.0.1.x version family (2.0.1.3, 2.0.1.2, 2.0.1.1, 2.0.1) (high 7.5)
- [CVE-2017-8018](https://insights.sbomify.com/CVE-2017-8018/): Denial of service in EMC AppSync host plug-in versions 3.5 and below (Windows platform only) (high 7.5)
- [CVE-2017-8017](https://insights.sbomify.com/CVE-2017-8017/): Cross-site scripting in EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, 9.4.2.x (medium 6.1)
- [CVE-2017-8016](https://insights.sbomify.com/CVE-2017-8016/): Cross-site scripting in RSA Archer GRC Platform versions prior to 6.2.0.5 (medium 5.4)
- [CVE-2017-8015](https://insights.sbomify.com/CVE-2017-8015/): EMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could potentially be exploited by malicious users to com (critical 9.8)
- [CVE-2017-8013](https://insights.sbomify.com/CVE-2017-8013/): Hardcoded credentials in EMC Data Protection Advisor (critical 9.8)
- [CVE-2017-8012](https://insights.sbomify.com/CVE-2017-8012/): Denial of service in EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R (Watch4Net) for SAS Solution Packs (high 7.4)
- [CVE-2017-8011](https://insights.sbomify.com/CVE-2017-8011/): Hardcoded credentials in EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R (Watch4Net) (critical 9.8)
- [CVE-2017-8007](https://insights.sbomify.com/CVE-2017-8007/): Path traversal in EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R (Watch4Net) for SAS Solution Packs (high 8.8)
- [CVE-2017-8006](https://insights.sbomify.com/CVE-2017-8006/): Auth bypass in RSA Authentication Manager 8.2 SP1 Patch 1 and earlier (medium 5.9)
- [CVE-2017-8005](https://insights.sbomify.com/CVE-2017-8005/): Cross-site scripting in RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, RSA Identity Management and Governance (RSA IMG) (medium 5.4)
- [CVE-2017-8004](https://insights.sbomify.com/CVE-2017-8004/): File upload in RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, RSA Identity Management and Governance (RSA IMG) (high 7.2)
- [CVE-2017-8003](https://insights.sbomify.com/CVE-2017-8003/): Path traversal in EMC Data Protection Advisor prior to 6.4 (medium 4.9)
- [CVE-2017-8002](https://insights.sbomify.com/CVE-2017-8002/): SQL injection in EMC Data Protection Advisor prior to 6.4 (high 8.8)
- [CVE-2017-8001](https://insights.sbomify.com/CVE-2017-8001/): Information disclosure in EMC ScaleIO EMC ScaleIO 2.0.1.x (high 8.4)
- [CVE-2017-8000](https://insights.sbomify.com/CVE-2017-8000/): Cross-site scripting in RSA Authentication Manager 8.2 SP1 and earlier (medium 4.8)
- [CVE-2017-7999](https://insights.sbomify.com/CVE-2017-7999/): Denial of service in n/a (medium 6.5)
- [CVE-2017-7998](https://insights.sbomify.com/CVE-2017-7998/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7997](https://insights.sbomify.com/CVE-2017-7997/): SQL injection in n/a (critical 9.8)
- [CVE-2017-7995](https://insights.sbomify.com/CVE-2017-7995/): Information disclosure in n/a (low 3.8)
- [CVE-2017-7994](https://insights.sbomify.com/CVE-2017-7994/): Null dereference in n/a (medium 6.5)
- [CVE-2017-7992](https://insights.sbomify.com/CVE-2017-7992/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7991](https://insights.sbomify.com/CVE-2017-7991/): SQL injection in n/a (critical 9.8)
- [CVE-2017-7990](https://insights.sbomify.com/CVE-2017-7990/): Cross-site request forgery in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/18/