# Vulnerabilities published in 2017


- [CVE-2017-6845](https://insights.sbomify.com/CVE-2017-6845/): Null dereference in n/a (medium 5.5)
- [CVE-2017-6844](https://insights.sbomify.com/CVE-2017-6844/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6843](https://insights.sbomify.com/CVE-2017-6843/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6842](https://insights.sbomify.com/CVE-2017-6842/): Null dereference in n/a (medium 5.5)
- [CVE-2017-6841](https://insights.sbomify.com/CVE-2017-6841/): Null dereference in n/a (medium 5.5)
- [CVE-2017-6840](https://insights.sbomify.com/CVE-2017-6840/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6839](https://insights.sbomify.com/CVE-2017-6839/): Integer overflow in n/a (medium 5.5)
- [CVE-2017-6838](https://insights.sbomify.com/CVE-2017-6838/): Integer overflow in n/a (medium 5.5)
- [CVE-2017-6837](https://insights.sbomify.com/CVE-2017-6837/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6836](https://insights.sbomify.com/CVE-2017-6836/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6835](https://insights.sbomify.com/CVE-2017-6835/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6834](https://insights.sbomify.com/CVE-2017-6834/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6833](https://insights.sbomify.com/CVE-2017-6833/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6832](https://insights.sbomify.com/CVE-2017-6832/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6831](https://insights.sbomify.com/CVE-2017-6831/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6830](https://insights.sbomify.com/CVE-2017-6830/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6829](https://insights.sbomify.com/CVE-2017-6829/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6828](https://insights.sbomify.com/CVE-2017-6828/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6827](https://insights.sbomify.com/CVE-2017-6827/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6823](https://insights.sbomify.com/CVE-2017-6823/): Privilege escalation in n/a (high 8.8)
- [CVE-2017-6821](https://insights.sbomify.com/CVE-2017-6821/): Path traversal in n/a (critical 9.8)
- [CVE-2017-6820](https://insights.sbomify.com/CVE-2017-6820/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6819](https://insights.sbomify.com/CVE-2017-6819/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2017-6818](https://insights.sbomify.com/CVE-2017-6818/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6817](https://insights.sbomify.com/CVE-2017-6817/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-6816](https://insights.sbomify.com/CVE-2017-6816/): Missing authorization in n/a (medium 4.9)
- [CVE-2017-6815](https://insights.sbomify.com/CVE-2017-6815/): Open redirect in n/a (medium 6.1)
- [CVE-2017-6814](https://insights.sbomify.com/CVE-2017-6814/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-6813](https://insights.sbomify.com/CVE-2017-6813/): Missing authorization in n/a (critical 9.8)
- [CVE-2017-6812](https://insights.sbomify.com/CVE-2017-6812/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6811](https://insights.sbomify.com/CVE-2017-6811/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6810](https://insights.sbomify.com/CVE-2017-6810/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6809](https://insights.sbomify.com/CVE-2017-6809/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6808](https://insights.sbomify.com/CVE-2017-6808/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6807](https://insights.sbomify.com/CVE-2017-6807/): Auth bypass in n/a (medium 6.1)
- [CVE-2017-6805](https://insights.sbomify.com/CVE-2017-6805/): Path traversal in n/a (medium 5.3)
- [CVE-2017-6803](https://insights.sbomify.com/CVE-2017-6803/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-6802](https://insights.sbomify.com/CVE-2017-6802/): Memory corruption in n/a (high 7.5)
- [CVE-2017-6801](https://insights.sbomify.com/CVE-2017-6801/): Memory corruption in n/a (high 7.5)
- [CVE-2017-6800](https://insights.sbomify.com/CVE-2017-6800/): Memory corruption in n/a (high 7.5)
- [CVE-2017-6799](https://insights.sbomify.com/CVE-2017-6799/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6798](https://insights.sbomify.com/CVE-2017-6798/): Other in n/a (high 7.8)
- [CVE-2017-6797](https://insights.sbomify.com/CVE-2017-6797/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6796](https://insights.sbomify.com/CVE-2017-6796/): Command injection in Cisco IOS XE (medium 6.7)
- [CVE-2017-6795](https://insights.sbomify.com/CVE-2017-6795/): Path traversal in Cisco IOS XE (medium 4.4)
- [CVE-2017-6794](https://insights.sbomify.com/CVE-2017-6794/): Command injection in Cisco Meeting Server (medium 6.7)
- [CVE-2017-6793](https://insights.sbomify.com/CVE-2017-6793/): Information disclosure in Cisco Prime Collaboration Provisioning Tool (medium 6.5)
- [CVE-2017-6792](https://insights.sbomify.com/CVE-2017-6792/): Path traversal in Cisco Prime Collaboration Provisioning Tool (medium 6.5)
- [CVE-2017-6791](https://insights.sbomify.com/CVE-2017-6791/): Denial of service in Cisco Unified Communications Manager (high 7.5)
- [CVE-2017-6790](https://insights.sbomify.com/CVE-2017-6790/): Denial of service in TelePresence Video Communication Server (VCS) (medium 6.8)
- [CVE-2017-6789](https://insights.sbomify.com/CVE-2017-6789/): Cross-site scripting in Cisco Unified Intelligence Center (medium 6.1)
- [CVE-2017-6788](https://insights.sbomify.com/CVE-2017-6788/): Cross-site scripting in AnyConnect WebLaunch (medium 6.1)
- [CVE-2017-6786](https://insights.sbomify.com/CVE-2017-6786/): Information disclosure in Elastic Services Controller (medium 6.3)
- [CVE-2017-6785](https://insights.sbomify.com/CVE-2017-6785/): Missing authorization in Unified Communications Manager (medium 4.3)
- [CVE-2017-6784](https://insights.sbomify.com/CVE-2017-6784/): Information disclosure in RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers (medium 5.3)
- [CVE-2017-6783](https://insights.sbomify.com/CVE-2017-6783/): Information disclosure in Content Security Management Appliance (SMA) (medium 4.3)
- [CVE-2017-6782](https://insights.sbomify.com/CVE-2017-6782/): Code injection in Prime Infrastructure (medium 5.4)
- [CVE-2017-6781](https://insights.sbomify.com/CVE-2017-6781/): Privilege escalation in Policy Suite (medium 5.3)
- [CVE-2017-6780](https://insights.sbomify.com/CVE-2017-6780/): Denial of service in Cisco IoT Field Network Director (high 7.5)
- [CVE-2017-6779](https://insights.sbomify.com/CVE-2017-6779/): Denial of service in Multiple Cisco Products unknown (high 7.5)
- [CVE-2017-6778](https://insights.sbomify.com/CVE-2017-6778/): Information disclosure in Ultra Services Platform (medium 6.5)
- [CVE-2017-6777](https://insights.sbomify.com/CVE-2017-6777/): Information disclosure in Elastic Services Controller (medium 4.9)
- [CVE-2017-6776](https://insights.sbomify.com/CVE-2017-6776/): Cross-site scripting in Elastic Services Controller (medium 6.1)
- [CVE-2017-6775](https://insights.sbomify.com/CVE-2017-6775/): Privilege escalation in StarOS for ASR 5000 Series Aggregated Services Routers (medium 5.7)
- [CVE-2017-6774](https://insights.sbomify.com/CVE-2017-6774/): Path traversal in StarOS for ASR 5000 Series Aggregated Services Routers (medium 5.0)
- [CVE-2017-6773](https://insights.sbomify.com/CVE-2017-6773/): Command injection in StarOS for ASR 5000 Series Aggregated Services Routers (medium 6.7)
- [CVE-2017-6772](https://insights.sbomify.com/CVE-2017-6772/): Information disclosure in Elastic Services Controller (medium 4.3)
- [CVE-2017-6771](https://insights.sbomify.com/CVE-2017-6771/): Information disclosure in Ultra Services Framework (high 7.5)
- [CVE-2017-6770](https://insights.sbomify.com/CVE-2017-6770/): Other in Multiple Cisco Products (medium 4.2)
- [CVE-2017-6769](https://insights.sbomify.com/CVE-2017-6769/): Cross-site scripting in Cisco Access Control System (medium 5.4)
- [CVE-2017-6768](https://insights.sbomify.com/CVE-2017-6768/): Privilege escalation in Application Policy Infrastructure Controller (APIC) (high 7.8)
- [CVE-2017-6767](https://insights.sbomify.com/CVE-2017-6767/): Privilege escalation in Application Policy Infrastructure Controller (APIC) (high 7.1)
- [CVE-2017-6766](https://insights.sbomify.com/CVE-2017-6766/): Security feature bypass in Cisco Firepower System Software (high 7.5)
- [CVE-2017-6765](https://insights.sbomify.com/CVE-2017-6765/): Cross-site scripting in Cisco Adaptive Security Appliance (medium 6.1)
- [CVE-2017-6764](https://insights.sbomify.com/CVE-2017-6764/): Cross-site scripting in Cisco Adaptive Security Appliance (medium 5.4)
- [CVE-2017-6763](https://insights.sbomify.com/CVE-2017-6763/): Denial of service in Cisco Meeting Server (high 7.5)
- [CVE-2017-6762](https://insights.sbomify.com/CVE-2017-6762/): Cross-site scripting in Cisco Jabber Guest Server (medium 6.1)
- [CVE-2017-6761](https://insights.sbomify.com/CVE-2017-6761/): Cross-site scripting in Cisco Finesse (medium 6.1)
- [CVE-2017-6759](https://insights.sbomify.com/CVE-2017-6759/): File upload in Cisco Prime Collaboration Provisioning Tool (medium 6.5)
- [CVE-2017-6758](https://insights.sbomify.com/CVE-2017-6758/): Path traversal in Cisco Unified Communications Manager (medium 6.5)
- [CVE-2017-6757](https://insights.sbomify.com/CVE-2017-6757/): SQL injection in Cisco Unified Communications Manager (high 8.8)
- [CVE-2017-6756](https://insights.sbomify.com/CVE-2017-6756/): Cross-site request forgery in Cisco Prime Collaboration Provisioning Tool (high 8.8)
- [CVE-2017-6755](https://insights.sbomify.com/CVE-2017-6755/): Cross-site scripting in Cisco Prime Collaboration Provisioning Tool (medium 6.1)
- [CVE-2017-6754](https://insights.sbomify.com/CVE-2017-6754/): SQL injection in Cisco Smart Net Total Care Software Collector Appliance (medium 6.5)
- [CVE-2017-6753](https://insights.sbomify.com/CVE-2017-6753/): Code injection in Cisco WebEx Browser Extension (high 8.8)
- [CVE-2017-6752](https://insights.sbomify.com/CVE-2017-6752/): Information disclosure in Cisco Adaptive Security Appliance (high 7.5)
- [CVE-2017-6751](https://insights.sbomify.com/CVE-2017-6751/): Auth bypass in Cisco Web Security Appliance (high 7.5)
- [CVE-2017-6750](https://insights.sbomify.com/CVE-2017-6750/): Hardcoded credentials in Cisco Web Security Appliance (high 7.5)
- [CVE-2017-6749](https://insights.sbomify.com/CVE-2017-6749/): Cross-site scripting in Cisco Web Security Appliance (medium 5.4)
- [CVE-2017-6748](https://insights.sbomify.com/CVE-2017-6748/): Command injection in Cisco Web Security Appliance (medium 6.7)
- [CVE-2017-6747](https://insights.sbomify.com/CVE-2017-6747/): Auth bypass in Cisco Identity Services Engine (critical 9.8)
- [CVE-2017-6746](https://insights.sbomify.com/CVE-2017-6746/): Command injection in Cisco Web Security Appliance (high 7.2)
- [CVE-2017-6745](https://insights.sbomify.com/CVE-2017-6745/): Denial of service in Cisco Videoscape Distribution Suite Cache Server (high 7.5)
- [CVE-2017-6744](https://insights.sbomify.com/CVE-2017-6744/): Cisco IOS Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6743](https://insights.sbomify.com/CVE-2017-6743/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6742](https://insights.sbomify.com/CVE-2017-6742/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6741](https://insights.sbomify.com/CVE-2017-6741/): Memory corruption in Cisco IOS XE Software (high 8.8)
- [CVE-2017-6740](https://insights.sbomify.com/CVE-2017-6740/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6739](https://insights.sbomify.com/CVE-2017-6739/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6738](https://insights.sbomify.com/CVE-2017-6738/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/29/