# Vulnerabilities published in 2017


- [CVE-2017-6737](https://insights.sbomify.com/CVE-2017-6737/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6736](https://insights.sbomify.com/CVE-2017-6736/): Cisco IOS and IOS XE Software SNMP Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6735](https://insights.sbomify.com/CVE-2017-6735/): Code injection in Cisco FireSIGHT System Software (medium 6.7)
- [CVE-2017-6734](https://insights.sbomify.com/CVE-2017-6734/): Cross-site scripting in Cisco Identity Services Engine (medium 5.4)
- [CVE-2017-6733](https://insights.sbomify.com/CVE-2017-6733/): Cross-site scripting in Cisco Identity Services Engine (medium 6.1)
- [CVE-2017-6732](https://insights.sbomify.com/CVE-2017-6732/): Privilege escalation in Cisco Prime Network (medium 6.7)
- [CVE-2017-6731](https://insights.sbomify.com/CVE-2017-6731/): Denial of service in Cisco IOS XR (high 7.5)
- [CVE-2017-6730](https://insights.sbomify.com/CVE-2017-6730/): Information disclosure in Cisco Wide Area Application Services (medium 5.3)
- [CVE-2017-6729](https://insights.sbomify.com/CVE-2017-6729/): Denial of service in Cisco StarOS (high 7.5)
- [CVE-2017-6728](https://insights.sbomify.com/CVE-2017-6728/): Privilege escalation in Cisco IOS XR (high 7.0)
- [CVE-2017-6727](https://insights.sbomify.com/CVE-2017-6727/): Denial of service in Cisco Wide Area Application Services (medium 5.3)
- [CVE-2017-6726](https://insights.sbomify.com/CVE-2017-6726/): Information disclosure in Cisco Prime Network Gateway (medium 5.5)
- [CVE-2017-6725](https://insights.sbomify.com/CVE-2017-6725/): Cross-site scripting in Cisco Prime Infrastructure (medium 6.1)
- [CVE-2017-6724](https://insights.sbomify.com/CVE-2017-6724/): Cross-site scripting in Cisco Prime Infrastructure (medium 6.1)
- [CVE-2017-6722](https://insights.sbomify.com/CVE-2017-6722/): Auth bypass in Cisco Unified Contact Center Express (medium 6.1)
- [CVE-2017-6721](https://insights.sbomify.com/CVE-2017-6721/): Denial of service in Cisco Wide Area Application Services (medium 5.3)
- [CVE-2017-6720](https://insights.sbomify.com/CVE-2017-6720/): Denial of service in Cisco Small Business Managed Switches (medium 6.5)
- [CVE-2017-6719](https://insights.sbomify.com/CVE-2017-6719/): Command injection in Cisco IOS XR (medium 6.7)
- [CVE-2017-6718](https://insights.sbomify.com/CVE-2017-6718/): Privilege escalation in Cisco IOS XR (medium 6.7)
- [CVE-2017-6717](https://insights.sbomify.com/CVE-2017-6717/): Cross-site scripting in Cisco Firepower Management Center (medium 5.4)
- [CVE-2017-6716](https://insights.sbomify.com/CVE-2017-6716/): Cross-site scripting in Cisco Firepower Management Center (medium 5.4)
- [CVE-2017-6715](https://insights.sbomify.com/CVE-2017-6715/): Cross-site scripting in Cisco Firepower Management Center (medium 5.4)
- [CVE-2017-6714](https://insights.sbomify.com/CVE-2017-6714/): Command injection in Cisco Ultra Services Framework (critical 9.8)
- [CVE-2017-6713](https://insights.sbomify.com/CVE-2017-6713/): Hardcoded credentials in Cisco Elastic Services Controller (critical 9.8)
- [CVE-2017-6712](https://insights.sbomify.com/CVE-2017-6712/): Command injection in Cisco Elastic Services Controller (high 8.8)
- [CVE-2017-6711](https://insights.sbomify.com/CVE-2017-6711/): Auth bypass in Cisco Ultra Services Framework (critical 9.1)
- [CVE-2017-6710](https://insights.sbomify.com/CVE-2017-6710/): Command injection in Virtual Network Function (VNF) Element Manager (high 8.1)
- [CVE-2017-6709](https://insights.sbomify.com/CVE-2017-6709/): Information disclosure in Cisco Ultra Services Framework (critical 9.8)
- [CVE-2017-6708](https://insights.sbomify.com/CVE-2017-6708/): Path traversal in Cisco Ultra Services Framework (critical 9.8)
- [CVE-2017-6707](https://insights.sbomify.com/CVE-2017-6707/): Command injection in Cisco StarOS (high 8.2)
- [CVE-2017-6706](https://insights.sbomify.com/CVE-2017-6706/): Information disclosure in Cisco Prime Collaboration Provisioning Tool (medium 5.1)
- [CVE-2017-6705](https://insights.sbomify.com/CVE-2017-6705/): Information disclosure in Cisco Prime Collaboration Provisioning Tool (medium 5.5)
- [CVE-2017-6704](https://insights.sbomify.com/CVE-2017-6704/): Path traversal in Cisco Prime Collaboration Provisioning Tool (medium 6.5)
- [CVE-2017-6703](https://insights.sbomify.com/CVE-2017-6703/): Auth bypass in Cisco Prime Collaboration Provisioning Tool (medium 5.9)
- [CVE-2017-6702](https://insights.sbomify.com/CVE-2017-6702/): Cross-site scripting in Cisco SocialMiner (medium 6.1)
- [CVE-2017-6701](https://insights.sbomify.com/CVE-2017-6701/): Cross-site scripting in Cisco Identity Services Engine (medium 6.1)
- [CVE-2017-6700](https://insights.sbomify.com/CVE-2017-6700/): Cross-site scripting in Cisco Prime Infrastructure and Evolved Programmable Network Manager (medium 6.1)
- [CVE-2017-6699](https://insights.sbomify.com/CVE-2017-6699/): Cross-site scripting in Cisco Prime Infrastructure and Evolved Programmable Network Manager (medium 6.1)
- [CVE-2017-6698](https://insights.sbomify.com/CVE-2017-6698/): SQL injection in Cisco Prime Infrastructure and Evolved Programmable Network Manager (medium 5.4)
- [CVE-2017-6697](https://insights.sbomify.com/CVE-2017-6697/): Information disclosure in Cisco Elastic Services Controller (medium 6.5)
- [CVE-2017-6696](https://insights.sbomify.com/CVE-2017-6696/): Information disclosure in Cisco Elastic Services Controller (medium 5.5)
- [CVE-2017-6695](https://insights.sbomify.com/CVE-2017-6695/): Information disclosure in Cisco Ultra Services Platform (medium 5.5)
- [CVE-2017-6694](https://insights.sbomify.com/CVE-2017-6694/): Information disclosure in Cisco Ultra Services Platform (medium 5.5)
- [CVE-2017-6693](https://insights.sbomify.com/CVE-2017-6693/): Missing authorization in Cisco Elastic Services Controller (medium 5.5)
- [CVE-2017-6692](https://insights.sbomify.com/CVE-2017-6692/): Hardcoded credentials in Cisco Ultra Services Framework Element Manager (high 8.8)
- [CVE-2017-6691](https://insights.sbomify.com/CVE-2017-6691/): Information disclosure in Cisco Elastic Services Controller (medium 6.5)
- [CVE-2017-6690](https://insights.sbomify.com/CVE-2017-6690/): Path traversal in Cisco StarOS (medium 4.9)
- [CVE-2017-6689](https://insights.sbomify.com/CVE-2017-6689/): Hardcoded credentials in Cisco Elastic Services Controller (high 8.8)
- [CVE-2017-6688](https://insights.sbomify.com/CVE-2017-6688/): Hardcoded credentials in Cisco Elastic Services Controller (high 8.8)
- [CVE-2017-6687](https://insights.sbomify.com/CVE-2017-6687/): Hardcoded credentials in Cisco Ultra Services Framework Element Manager (high 8.8)
- [CVE-2017-6686](https://insights.sbomify.com/CVE-2017-6686/): Hardcoded credentials in Cisco Ultra Services Framework Element Manager (high 8.8)
- [CVE-2017-6685](https://insights.sbomify.com/CVE-2017-6685/): Hardcoded credentials in Cisco Ultra Services Framework Staging Server (high 8.8)
- [CVE-2017-6684](https://insights.sbomify.com/CVE-2017-6684/): Hardcoded credentials in Cisco Elastic Services Controller (high 8.8)
- [CVE-2017-6683](https://insights.sbomify.com/CVE-2017-6683/): Command injection in Cisco Elastic Services Controller (high 8.8)
- [CVE-2017-6682](https://insights.sbomify.com/CVE-2017-6682/): Command injection in Cisco Elastic Services Controller (high 8.8)
- [CVE-2017-6681](https://insights.sbomify.com/CVE-2017-6681/): Path traversal in Cisco Ultra Services Framework (high 7.5)
- [CVE-2017-6680](https://insights.sbomify.com/CVE-2017-6680/): Path traversal in Cisco Ultra Services Framework (high 7.5)
- [CVE-2017-6679](https://insights.sbomify.com/CVE-2017-6679/): Security feature bypass in Cisco Umbrella Virtual Appliance Version 2.0.3 and prior (medium 6.4)
- [CVE-2017-6678](https://insights.sbomify.com/CVE-2017-6678/): Denial of service in Cisco Virtualized Packet Core-Distributed Instance (high 7.5)
- [CVE-2017-6675](https://insights.sbomify.com/CVE-2017-6675/): Cross-site scripting in Cisco Industrial Network Director (medium 6.1)
- [CVE-2017-6674](https://insights.sbomify.com/CVE-2017-6674/): Security feature bypass in Cisco Firepower System Software (high 7.5)
- [CVE-2017-6673](https://insights.sbomify.com/CVE-2017-6673/): Information disclosure in Cisco Firepower Management Center (medium 6.5)
- [CVE-2017-6672](https://insights.sbomify.com/CVE-2017-6672/): Security feature bypass in Cisco ASR 5000 Series Aggregation Services Routers (high 7.5)
- [CVE-2017-6671](https://insights.sbomify.com/CVE-2017-6671/): Security feature bypass in Cisco Email Security Appliance (high 7.5)
- [CVE-2017-6670](https://insights.sbomify.com/CVE-2017-6670/): Open redirect in Cisco Unified Communications Domain Manager (medium 6.1)
- [CVE-2017-6669](https://insights.sbomify.com/CVE-2017-6669/): Memory corruption in Cisco WebEx Network Recording Player (high 7.8)
- [CVE-2017-6668](https://insights.sbomify.com/CVE-2017-6668/): SQL injection in Cisco Unified Communications Domain Manager (medium 4.9)
- [CVE-2017-6667](https://insights.sbomify.com/CVE-2017-6667/): Code injection in Cisco Context Service SDK (critical 9.8)
- [CVE-2017-6666](https://insights.sbomify.com/CVE-2017-6666/): Denial of service in Cisco Network Convergence System 5500 Series Routers (medium 6.0)
- [CVE-2017-6665](https://insights.sbomify.com/CVE-2017-6665/): Information disclosure in Cisco IOS and IOS XE (medium 6.5)
- [CVE-2017-6664](https://insights.sbomify.com/CVE-2017-6664/): Auth bypass in Cisco IOS XE (high 7.5)
- [CVE-2017-6663](https://insights.sbomify.com/CVE-2017-6663/): Cisco IOS Software and Cisco IOS XE Software Denial-of-Service (medium 6.5, exploited in the wild)
- [CVE-2017-6662](https://insights.sbomify.com/CVE-2017-6662/): XML external entity in Cisco Prime Infrastructure and Evolved Programmable Network Manager (high 8.0)
- [CVE-2017-6661](https://insights.sbomify.com/CVE-2017-6661/): Cross-site scripting in Cisco Email Security and Content Security Management Appliance (medium 6.1)
- [CVE-2017-6659](https://insights.sbomify.com/CVE-2017-6659/): Cross-site request forgery in Cisco Prime Collaboration Assurance (high 8.8)
- [CVE-2017-6658](https://insights.sbomify.com/CVE-2017-6658/): Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. (high 7.5)
- [CVE-2017-6657](https://insights.sbomify.com/CVE-2017-6657/): Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. (high 7.5)
- [CVE-2017-6656](https://insights.sbomify.com/CVE-2017-6656/): Denial of service in Cisco IP Phone 8800 Series (medium 5.9)
- [CVE-2017-6655](https://insights.sbomify.com/CVE-2017-6655/): Denial of service in Cisco NX-OS Software Fibre Channel over Ethernet (medium 6.5)
- [CVE-2017-6654](https://insights.sbomify.com/CVE-2017-6654/): Cross-site scripting in Cisco Unified Communications Manager (medium 6.1)
- [CVE-2017-6653](https://insights.sbomify.com/CVE-2017-6653/): Denial of service in Cisco Identity Services Engine (high 7.5)
- [CVE-2017-6652](https://insights.sbomify.com/CVE-2017-6652/): Path traversal in Cisco TelePresence IX5000 Series (high 7.5)
- [CVE-2017-6651](https://insights.sbomify.com/CVE-2017-6651/): Information disclosure in Cisco WebEx Meetings Server (high 7.5)
- [CVE-2017-6650](https://insights.sbomify.com/CVE-2017-6650/): Command injection in Cisco Nexus Series Switches (high 7.8)
- [CVE-2017-6649](https://insights.sbomify.com/CVE-2017-6649/): Command injection in Cisco Nexus Series Switches (high 7.8)
- [CVE-2017-6648](https://insights.sbomify.com/CVE-2017-6648/): Denial of service in Cisco TelePresence Endpoint Denial of Service Vulnerability (high 7.5)
- [CVE-2017-6647](https://insights.sbomify.com/CVE-2017-6647/): Information disclosure in Cisco Remote Expert Manager (medium 5.3)
- [CVE-2017-6646](https://insights.sbomify.com/CVE-2017-6646/): Information disclosure in Cisco Remote Expert Manager (medium 5.3)
- [CVE-2017-6645](https://insights.sbomify.com/CVE-2017-6645/): Information disclosure in Cisco Remote Expert Manager (medium 5.3)
- [CVE-2017-6644](https://insights.sbomify.com/CVE-2017-6644/): Information disclosure in Cisco Remote Expert Manager (medium 5.3)
- [CVE-2017-6643](https://insights.sbomify.com/CVE-2017-6643/): Information disclosure in Cisco Remote Expert Manager (medium 5.3)
- [CVE-2017-6642](https://insights.sbomify.com/CVE-2017-6642/): Information disclosure in Cisco Remote Expert Manager (medium 5.3)
- [CVE-2017-6641](https://insights.sbomify.com/CVE-2017-6641/): Denial of service in Cisco Remote Expert Manager (high 7.5)
- [CVE-2017-6640](https://insights.sbomify.com/CVE-2017-6640/): Hardcoded credentials in Cisco Prime Data Center Network Manager Server Static Credential Vulnerability (critical 9.8)
- [CVE-2017-6639](https://insights.sbomify.com/CVE-2017-6639/): Missing authorization in Cisco Prime Data Center Network Manager Debug Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2017-6638](https://insights.sbomify.com/CVE-2017-6638/): Privilege escalation in Cisco AnyConnect Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2017-6637](https://insights.sbomify.com/CVE-2017-6637/): Path traversal in Cisco Prime Collaboration Provisioning (medium 6.5)
- [CVE-2017-6636](https://insights.sbomify.com/CVE-2017-6636/): Path traversal in Cisco Prime Collaboration Provisioning (medium 6.5)
- [CVE-2017-6635](https://insights.sbomify.com/CVE-2017-6635/): Path traversal in Cisco Prime Collaboration Provisioning (medium 6.5)
- [CVE-2017-6634](https://insights.sbomify.com/CVE-2017-6634/): Cross-site request forgery in Cisco Industrial Ethernet 1000 Series Switches (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/30/