# Vulnerabilities published in 2017


- [CVE-2017-6633](https://insights.sbomify.com/CVE-2017-6633/): Denial of service in Cisco UCS C-Series Rack Servers (high 7.5)
- [CVE-2017-6632](https://insights.sbomify.com/CVE-2017-6632/): Denial of service in Cisco FirePOWER System Software (high 7.5)
- [CVE-2017-6631](https://insights.sbomify.com/CVE-2017-6631/): Denial of service in Cisco Yes Set-Top Box (high 7.5)
- [CVE-2017-6630](https://insights.sbomify.com/CVE-2017-6630/): Denial of service in Cisco IP Phone 8851 (medium 5.3)
- [CVE-2017-6629](https://insights.sbomify.com/CVE-2017-6629/): Path traversal in Cisco Unity Connection (medium 5.3)
- [CVE-2017-6628](https://insights.sbomify.com/CVE-2017-6628/): Denial of service in Cisco Wide Area Application Services SMART-SSL Accelerator (medium 6.8)
- [CVE-2017-6627](https://insights.sbomify.com/CVE-2017-6627/): Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2017-6626](https://insights.sbomify.com/CVE-2017-6626/): Hardcoded credentials in Cisco Finesse for Cisco Unified Contact Center Enterprise (medium 5.3)
- [CVE-2017-6625](https://insights.sbomify.com/CVE-2017-6625/): Denial of service in Cisco Firepower Threat Defense and Cisco ASA with FirePOWER Module (high 7.1)
- [CVE-2017-6624](https://insights.sbomify.com/CVE-2017-6624/): Missing authorization in Cisco CallManager Express (medium 5.3)
- [CVE-2017-6623](https://insights.sbomify.com/CVE-2017-6623/): Privilege escalation in Cisco Policy Suite (high 7.8)
- [CVE-2017-6622](https://insights.sbomify.com/CVE-2017-6622/): Command injection in Cisco Prime Collaboration Provisioning (critical 9.8)
- [CVE-2017-6621](https://insights.sbomify.com/CVE-2017-6621/): Information disclosure in Cisco Prime Collaboration (high 7.5)
- [CVE-2017-6620](https://insights.sbomify.com/CVE-2017-6620/): Auth bypass in Cisco CVR100W Wireless-N VPN Router (medium 5.8)
- [CVE-2017-6619](https://insights.sbomify.com/CVE-2017-6619/): Command injection in Cisco Integrated Management Controller (high 8.8)
- [CVE-2017-6618](https://insights.sbomify.com/CVE-2017-6618/): Cross-site scripting in Cisco Integrated Management Controller (medium 5.4)
- [CVE-2017-6617](https://insights.sbomify.com/CVE-2017-6617/): Auth bypass in Cisco Integrated Management Controller (medium 5.4)
- [CVE-2017-6616](https://insights.sbomify.com/CVE-2017-6616/): Code injection in Cisco Integrated Management Controller (high 8.8)
- [CVE-2017-6615](https://insights.sbomify.com/CVE-2017-6615/): Race condition in Cisco IOS XE Software (medium 6.3)
- [CVE-2017-6614](https://insights.sbomify.com/CVE-2017-6614/): Missing authorization in Cisco FindIT (medium 6.5)
- [CVE-2017-6613](https://insights.sbomify.com/CVE-2017-6613/): Denial of service in Cisco Prime Network Registrar (medium 5.8)
- [CVE-2017-6612](https://insights.sbomify.com/CVE-2017-6612/): Open redirect in Cisco ASR 5000 Series Aggregation Services Routers (high 8.6)
- [CVE-2017-6611](https://insights.sbomify.com/CVE-2017-6611/): Cross-site scripting in Cisco Prime Infrastructure (medium 6.1)
- [CVE-2017-6610](https://insights.sbomify.com/CVE-2017-6610/): Denial of service in Cisco ASA Software (high 7.7)
- [CVE-2017-6609](https://insights.sbomify.com/CVE-2017-6609/): Denial of service in Cisco ASA Software (high 7.7)
- [CVE-2017-6608](https://insights.sbomify.com/CVE-2017-6608/): Denial of service in Cisco ASA Software (high 8.6)
- [CVE-2017-6607](https://insights.sbomify.com/CVE-2017-6607/): Denial of service in Cisco ASA Software (high 8.7)
- [CVE-2017-6606](https://insights.sbomify.com/CVE-2017-6606/): Command injection in Cisco IOS XE (medium 6.4)
- [CVE-2017-6605](https://insights.sbomify.com/CVE-2017-6605/): Cross-site scripting in Cisco Identity Services Engine (medium 5.4)
- [CVE-2017-6604](https://insights.sbomify.com/CVE-2017-6604/): Open redirect in Cisco Integrated Management Controller (medium 6.1)
- [CVE-2017-6603](https://insights.sbomify.com/CVE-2017-6603/): Denial of service in Cisco ASR 903 and ASR 920 Series Devices (medium 6.5)
- [CVE-2017-6602](https://insights.sbomify.com/CVE-2017-6602/): Command injection in Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance (medium 4.4)
- [CVE-2017-6601](https://insights.sbomify.com/CVE-2017-6601/): Command injection in Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance (high 7.1)
- [CVE-2017-6600](https://insights.sbomify.com/CVE-2017-6600/): Command injection in Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance (high 7.8)
- [CVE-2017-6599](https://insights.sbomify.com/CVE-2017-6599/): Denial of service in Cisco IOS XR Software (medium 5.3)
- [CVE-2017-6598](https://insights.sbomify.com/CVE-2017-6598/): Privilege escalation in Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance (medium 6.7)
- [CVE-2017-6597](https://insights.sbomify.com/CVE-2017-6597/): Command injection in Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance (high 7.8)
- [CVE-2017-6596](https://insights.sbomify.com/CVE-2017-6596/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6594](https://insights.sbomify.com/CVE-2017-6594/): Security feature bypass in n/a (high 7.5)
- [CVE-2017-6591](https://insights.sbomify.com/CVE-2017-6591/): django-epiceditor vulnerable to XSS in form field (medium 6.1)
- [CVE-2017-6590](https://insights.sbomify.com/CVE-2017-6590/): Privilege escalation in n/a (medium 6.3)
- [CVE-2017-6589](https://insights.sbomify.com/CVE-2017-6589/): EpicEditor XSS Vulnerability (medium 6.1)
- [CVE-2017-6578](https://insights.sbomify.com/CVE-2017-6578/): SQL injection in n/a (high 7.2)
- [CVE-2017-6577](https://insights.sbomify.com/CVE-2017-6577/): SQL injection in n/a (high 7.2)
- [CVE-2017-6576](https://insights.sbomify.com/CVE-2017-6576/): SQL injection in n/a (high 7.2)
- [CVE-2017-6575](https://insights.sbomify.com/CVE-2017-6575/): SQL injection in n/a (high 7.2)
- [CVE-2017-6574](https://insights.sbomify.com/CVE-2017-6574/): SQL injection in n/a (high 7.2)
- [CVE-2017-6573](https://insights.sbomify.com/CVE-2017-6573/): SQL injection in n/a (high 7.2)
- [CVE-2017-6572](https://insights.sbomify.com/CVE-2017-6572/): SQL injection in n/a (high 7.2)
- [CVE-2017-6571](https://insights.sbomify.com/CVE-2017-6571/): SQL injection in n/a (high 7.2)
- [CVE-2017-6570](https://insights.sbomify.com/CVE-2017-6570/): SQL injection in n/a (high 7.2)
- [CVE-2017-6565](https://insights.sbomify.com/CVE-2017-6565/): File upload in n/a (high 8.8)
- [CVE-2017-6564](https://insights.sbomify.com/CVE-2017-6564/): Missing authorization in n/a (medium 6.5)
- [CVE-2017-6562](https://insights.sbomify.com/CVE-2017-6562/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6561](https://insights.sbomify.com/CVE-2017-6561/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6560](https://insights.sbomify.com/CVE-2017-6560/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6559](https://insights.sbomify.com/CVE-2017-6559/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6558](https://insights.sbomify.com/CVE-2017-6558/): Auth bypass in n/a (critical 9.8)
- [CVE-2017-6557](https://insights.sbomify.com/CVE-2017-6557/): SQL injection in n/a (high 8.8)
- [CVE-2017-6556](https://insights.sbomify.com/CVE-2017-6556/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-6555](https://insights.sbomify.com/CVE-2017-6555/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-6554](https://insights.sbomify.com/CVE-2017-6554/): Path traversal in n/a (high 7.2)
- [CVE-2017-6553](https://insights.sbomify.com/CVE-2017-6553/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-6552](https://insights.sbomify.com/CVE-2017-6552/): Denial of service in n/a (high 7.5)
- [CVE-2017-6551](https://insights.sbomify.com/CVE-2017-6551/): Other in n/a (critical 9.8)
- [CVE-2017-6550](https://insights.sbomify.com/CVE-2017-6550/): SQL injection in n/a (critical 9.8)
- [CVE-2017-6549](https://insights.sbomify.com/CVE-2017-6549/): Auth bypass in n/a (high 8.8)
- [CVE-2017-6548](https://insights.sbomify.com/CVE-2017-6548/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-6547](https://insights.sbomify.com/CVE-2017-6547/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6544](https://insights.sbomify.com/CVE-2017-6544/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6543](https://insights.sbomify.com/CVE-2017-6543/): Path traversal in n/a (high 7.3)
- [CVE-2017-6542](https://insights.sbomify.com/CVE-2017-6542/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-6541](https://insights.sbomify.com/CVE-2017-6541/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6540](https://insights.sbomify.com/CVE-2017-6540/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6539](https://insights.sbomify.com/CVE-2017-6539/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6538](https://insights.sbomify.com/CVE-2017-6538/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6537](https://insights.sbomify.com/CVE-2017-6537/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6536](https://insights.sbomify.com/CVE-2017-6536/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6535](https://insights.sbomify.com/CVE-2017-6535/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6534](https://insights.sbomify.com/CVE-2017-6534/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6533](https://insights.sbomify.com/CVE-2017-6533/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6532](https://insights.sbomify.com/CVE-2017-6532/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2017-6531](https://insights.sbomify.com/CVE-2017-6531/): Missing authorization in n/a (critical 9.8)
- [CVE-2017-6530](https://insights.sbomify.com/CVE-2017-6530/): Missing authorization in n/a (critical 9.8)
- [CVE-2017-6529](https://insights.sbomify.com/CVE-2017-6529/): Auth bypass in n/a (high 8.8)
- [CVE-2017-6528](https://insights.sbomify.com/CVE-2017-6528/): Hardcoded credentials in n/a (high 8.1)
- [CVE-2017-6527](https://insights.sbomify.com/CVE-2017-6527/): Path traversal in n/a (high 7.5)
- [CVE-2017-6526](https://insights.sbomify.com/CVE-2017-6526/): Command injection in n/a (critical 9.8)
- [CVE-2017-6520](https://insights.sbomify.com/CVE-2017-6520/): Denial of service in n/a (critical 9.1)
- [CVE-2017-6519](https://insights.sbomify.com/CVE-2017-6519/): Denial of service in n/a (critical 9.1)
- [CVE-2017-6518](https://insights.sbomify.com/CVE-2017-6518/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6517](https://insights.sbomify.com/CVE-2017-6517/): Other in n/a (critical 9.8)
- [CVE-2017-6516](https://insights.sbomify.com/CVE-2017-6516/): Privilege escalation in n/a (medium 6.7)
- [CVE-2017-6514](https://insights.sbomify.com/CVE-2017-6514/): Information disclosure in n/a (medium 5.3)
- [CVE-2017-6513](https://insights.sbomify.com/CVE-2017-6513/): Missing authorization in n/a (critical 9.9)
- [CVE-2017-6512](https://insights.sbomify.com/CVE-2017-6512/): Race condition in n/a (medium 5.9)
- [CVE-2017-6511](https://insights.sbomify.com/CVE-2017-6511/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6510](https://insights.sbomify.com/CVE-2017-6510/): Path traversal in n/a (high 7.5)
- [CVE-2017-6509](https://insights.sbomify.com/CVE-2017-6509/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6508](https://insights.sbomify.com/CVE-2017-6508/): Other in n/a (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/31/