# Vulnerabilities published in 2017


- [CVE-2017-5698](https://insights.sbomify.com/CVE-2017-5698/): Security feature bypass in Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology (medium 4.4)
- [CVE-2017-5697](https://insights.sbomify.com/CVE-2017-5697/): Other in Active Mangement Technology (medium 6.5)
- [CVE-2017-5696](https://insights.sbomify.com/CVE-2017-5696/): Privilege escalation in Intel Graphics Driver (high 7.8)
- [CVE-2017-5695](https://insights.sbomify.com/CVE-2017-5695/): Other in Solid-State Drive Consumer, Professional, Embedded, Data Center (medium 4.6)
- [CVE-2017-5694](https://insights.sbomify.com/CVE-2017-5694/): Other in Solid-State Drive Professional (medium 4.6)
- [CVE-2017-5693](https://insights.sbomify.com/CVE-2017-5693/): Denial of service in Puma 5, 6, and 7 Series (high 7.5)
- [CVE-2017-5692](https://insights.sbomify.com/CVE-2017-5692/): Memory corruption in Mobile, Desktop, Server, Workstation, and Embedded processors based on Intel Core and Atom Processors using an affected driver. (medium 5.5)
- [CVE-2017-5691](https://insights.sbomify.com/CVE-2017-5691/): Security feature bypass in 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Processor Families, and Intel Xeon E3-1200 v5 and v6 Product Families. (critical 9.0)
- [CVE-2017-5689](https://insights.sbomify.com/CVE-2017-5689/): Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2017-5688](https://insights.sbomify.com/CVE-2017-5688/): Privilege escalation in Solid State Drive Toolbox (medium 6.7)
- [CVE-2017-5686](https://insights.sbomify.com/CVE-2017-5686/): Misconfiguration in Intel NUC NUC6i5SYSH/K, Intel NUC6i3SYSH/K (low 3.9)
- [CVE-2017-5685](https://insights.sbomify.com/CVE-2017-5685/): Misconfiguration in Intel NUC NUC6i7KYK (low 3.9)
- [CVE-2017-5684](https://insights.sbomify.com/CVE-2017-5684/): Misconfiguration in Intel Compute Stick STK2MV64CC (low 3.9)
- [CVE-2017-5683](https://insights.sbomify.com/CVE-2017-5683/): Privilege escalation in Intel Hardware Accelerated Execution Manager (high 7.8)
- [CVE-2017-5682](https://insights.sbomify.com/CVE-2017-5682/): Privilege escalation in Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, Intel Threading Building Blocks Before 2017 Update 2 (high 7.3)
- [CVE-2017-5681](https://insights.sbomify.com/CVE-2017-5681/): Weak cryptography in Intel Quick Assist Technology (high 7.5)
- [CVE-2017-5677](https://insights.sbomify.com/CVE-2017-5677/): Deserialization in pear:html ajax (critical 9.8)
- [CVE-2017-5675](https://insights.sbomify.com/CVE-2017-5675/): Command injection in embedthis:goahead (high 8.8)
- [CVE-2017-5674](https://insights.sbomify.com/CVE-2017-5674/): Information disclosure in embedthis:goahead (critical 9.8)
- [CVE-2017-5673](https://insights.sbomify.com/CVE-2017-5673/): Cross-site scripting in kunena:kunena (medium 6.1)
- [CVE-2017-5672](https://insights.sbomify.com/CVE-2017-5672/): Information disclosure in kony:enterprise mobile management (medium 6.5)
- [CVE-2017-5671](https://insights.sbomify.com/CVE-2017-5671/): Privilege escalation in honeywell:intermec pc23 firmware (high 8.8)
- [CVE-2017-5670](https://insights.sbomify.com/CVE-2017-5670/): Information disclosure in riverbed:rios (medium 4.6)
- [CVE-2017-5669](https://insights.sbomify.com/CVE-2017-5669/): Security feature bypass in canonical:ubuntu linux (high 7.8)
- [CVE-2017-5668](https://insights.sbomify.com/CVE-2017-5668/): Null dereference in bitlbee:bitlbee (critical 9.8)
- [CVE-2017-5667](https://insights.sbomify.com/CVE-2017-5667/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2017-5666](https://insights.sbomify.com/CVE-2017-5666/): Memory corruption in mp3splt project:mp3splt (medium 5.5)
- [CVE-2017-5665](https://insights.sbomify.com/CVE-2017-5665/): Null dereference in libmp3splt project:libmp3splt (medium 5.5)
- [CVE-2017-5664](https://insights.sbomify.com/CVE-2017-5664/): Improper Handling of Exceptional Conditions in Apache Tomcat (high 7.5)
- [CVE-2017-5663](https://insights.sbomify.com/CVE-2017-5663/): SQL injection in Apache Fineract (high 8.8)
- [CVE-2017-5662](https://insights.sbomify.com/CVE-2017-5662/): Improper Restriction of XML External Entity Reference in Apache Batik (high 7.3)
- [CVE-2017-5661](https://insights.sbomify.com/CVE-2017-5661/): Improper Restriction of XML External Entity Reference in Apache FOP (high 7.3)
- [CVE-2017-5660](https://insights.sbomify.com/CVE-2017-5660/): Other in Apache Traffic Server (high 8.6)
- [CVE-2017-5659](https://insights.sbomify.com/CVE-2017-5659/): Denial of service in Apache Traffic Server (high 7.5)
- [CVE-2017-5658](https://insights.sbomify.com/CVE-2017-5658/): Information disclosure in Apache Pony Mail (medium 5.3)
- [CVE-2017-5657](https://insights.sbomify.com/CVE-2017-5657/): Apache Archiva vulnerable to Cross Site Request Forgery (high 8.0)
- [CVE-2017-5656](https://insights.sbomify.com/CVE-2017-5656/): Session Fixation in Apache CXF (high 7.5)
- [CVE-2017-5655](https://insights.sbomify.com/CVE-2017-5655/): Information disclosure in Apache Ambari (medium 6.5)
- [CVE-2017-5654](https://insights.sbomify.com/CVE-2017-5654/): Server-side request forgery in Apache Ambari (high 7.5)
- [CVE-2017-5653](https://insights.sbomify.com/CVE-2017-5653/): Improper Certificate Validation in Apache CXF (medium 5.3)
- [CVE-2017-5652](https://insights.sbomify.com/CVE-2017-5652/): Information disclosure in Apache Impala (high 7.5)
- [CVE-2017-5651](https://insights.sbomify.com/CVE-2017-5651/): Expected Behavior Violation in Apache Tomcat (critical 9.8)
- [CVE-2017-5650](https://insights.sbomify.com/CVE-2017-5650/): Improper Resource Shutdown or Release in Apache Tomcat (high 7.5)
- [CVE-2017-5649](https://insights.sbomify.com/CVE-2017-5649/): Apache Geode information disclosure vulnerability (high 7.5)
- [CVE-2017-5648](https://insights.sbomify.com/CVE-2017-5648/): Exposure of Resource to Wrong Sphere in Apache Tomcat (critical 9.1)
- [CVE-2017-5647](https://insights.sbomify.com/CVE-2017-5647/): Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat (high 7.5)
- [CVE-2017-5646](https://insights.sbomify.com/CVE-2017-5646/): Apache Knox allows impersonation of users (medium 6.8)
- [CVE-2017-5645](https://insights.sbomify.com/CVE-2017-5645/): Deserialization of Untrusted Data in Log4j (critical 9.8)
- [CVE-2017-5644](https://insights.sbomify.com/CVE-2017-5644/): Improper Restriction of Recursive Entity References in DTDs in Apache POI (medium 5.5)
- [CVE-2017-5643](https://insights.sbomify.com/CVE-2017-5643/): Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE. (high 7.4)
- [CVE-2017-5642](https://insights.sbomify.com/CVE-2017-5642/): Misconfiguration in Apache Ambari (critical 9.8)
- [CVE-2017-5641](https://insights.sbomify.com/CVE-2017-5641/): Apache Flex BlazeDS unsafe deserialization (critical 9.8)
- [CVE-2017-5640](https://insights.sbomify.com/CVE-2017-5640/): Auth bypass in Apache Impala (critical 9.8)
- [CVE-2017-5638](https://insights.sbomify.com/CVE-2017-5638/): Apache Struts Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-5637](https://insights.sbomify.com/CVE-2017-5637/): Uncontrolled Resource Consumption in Apache ZooKeeper (high 7.5)
- [CVE-2017-5636](https://insights.sbomify.com/CVE-2017-5636/): Injection in Apache NiFi (critical 9.8)
- [CVE-2017-5635](https://insights.sbomify.com/CVE-2017-5635/): Improper Authentication In Apache NiFi (high 7.5)
- [CVE-2017-5634](https://insights.sbomify.com/CVE-2017-5634/): Security feature bypass in norwegian-air:norwegian air kiosk (medium 6.6)
- [CVE-2017-5633](https://insights.sbomify.com/CVE-2017-5633/): Cross-site request forgery in d-link:di-524 firmware (high 8.0)
- [CVE-2017-5632](https://insights.sbomify.com/CVE-2017-5632/): Denial of service in asus:rt-n56u firmware (medium 6.5)
- [CVE-2017-5631](https://insights.sbomify.com/CVE-2017-5631/): Cross-site scripting in kmc information systems:caseaware (medium 6.1)
- [CVE-2017-5630](https://insights.sbomify.com/CVE-2017-5630/): PEAR core file overwrite vulnerability (high 7.5)
- [CVE-2017-5628](https://insights.sbomify.com/CVE-2017-5628/): Integer overflow in artifex:mujs (high 7.8)
- [CVE-2017-5627](https://insights.sbomify.com/CVE-2017-5627/): Integer overflow in artifex:mujs (high 7.8)
- [CVE-2017-5626](https://insights.sbomify.com/CVE-2017-5626/): Security feature bypass in oneplus:oxygenos (critical 9.8)
- [CVE-2017-5625](https://insights.sbomify.com/CVE-2017-5625/): Security feature bypass in oneplus:oxygenos (medium 4.6)
- [CVE-2017-5624](https://insights.sbomify.com/CVE-2017-5624/): Security feature bypass in oneplus:oxygenos (critical 9.8)
- [CVE-2017-5623](https://insights.sbomify.com/CVE-2017-5623/): Security feature bypass in oneplus:oxygenos (medium 6.6)
- [CVE-2017-5622](https://insights.sbomify.com/CVE-2017-5622/): Misconfiguration in oneplus:oxygenos (medium 5.9)
- [CVE-2017-5621](https://insights.sbomify.com/CVE-2017-5621/): Cross-site scripting in zammad:zammad (medium 6.1)
- [CVE-2017-5620](https://insights.sbomify.com/CVE-2017-5620/): Cross-site scripting in zammad:zammad (medium 6.1)
- [CVE-2017-5619](https://insights.sbomify.com/CVE-2017-5619/): Auth bypass in zammad:zammad (critical 9.8)
- [CVE-2017-5618](https://insights.sbomify.com/CVE-2017-5618/): Privilege escalation in gnu:screen (high 7.8)
- [CVE-2017-5617](https://insights.sbomify.com/CVE-2017-5617/): Server Side Request Forgery in svgSalamander (high 7.4)
- [CVE-2017-5616](https://insights.sbomify.com/CVE-2017-5616/): Cross-site scripting in cpanel:cgiecho (medium 6.1)
- [CVE-2017-5615](https://insights.sbomify.com/CVE-2017-5615/): Other in cpanel:cgiecho (medium 6.1)
- [CVE-2017-5614](https://insights.sbomify.com/CVE-2017-5614/): Open redirect in cpanel:cpanel (medium 6.1)
- [CVE-2017-5613](https://insights.sbomify.com/CVE-2017-5613/): Memory corruption in cpanel:cgiecho (high 7.8)
- [CVE-2017-5612](https://insights.sbomify.com/CVE-2017-5612/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2017-5611](https://insights.sbomify.com/CVE-2017-5611/): SQL injection in debian:debian linux (critical 9.8)
- [CVE-2017-5610](https://insights.sbomify.com/CVE-2017-5610/): Information disclosure in debian:debian linux (medium 5.3)
- [CVE-2017-5609](https://insights.sbomify.com/CVE-2017-5609/): SQL injection in s9y:serendipity (high 8.8)
- [CVE-2017-5608](https://insights.sbomify.com/CVE-2017-5608/): Cross-site scripting in piwigo:piwigo (medium 6.1)
- [CVE-2017-5607](https://insights.sbomify.com/CVE-2017-5607/): Information disclosure in splunk:splunk (low 3.5)
- [CVE-2017-5606](https://insights.sbomify.com/CVE-2017-5606/): Security feature bypass in xabber:xabber (medium 5.9)
- [CVE-2017-5605](https://insights.sbomify.com/CVE-2017-5605/): XMPP Clients User Impersonation Vulnerability in Movim Moxl (medium 5.9)
- [CVE-2017-5604](https://insights.sbomify.com/CVE-2017-5604/): Security feature bypass in mcabber:mcabber (medium 5.9)
- [CVE-2017-5603](https://insights.sbomify.com/CVE-2017-5603/): Security feature bypass in jitsi:jitsi (medium 5.9)
- [CVE-2017-5602](https://insights.sbomify.com/CVE-2017-5602/): Security feature bypass in jappix project:jappix (medium 5.9)
- [CVE-2017-5601](https://insights.sbomify.com/CVE-2017-5601/): Memory corruption in libarchive:libarchive (high 7.5)
- [CVE-2017-5600](https://insights.sbomify.com/CVE-2017-5600/): Hardcoded credentials in netapp:oncommand insight (critical 9.8)
- [CVE-2017-5599](https://insights.sbomify.com/CVE-2017-5599/): Cross-site scripting in eclinicalworks:patient portal (medium 6.1)
- [CVE-2017-5598](https://insights.sbomify.com/CVE-2017-5598/): SQL injection in eclinicalworks:patient portal (high 7.5)
- [CVE-2017-5597](https://insights.sbomify.com/CVE-2017-5597/): Integer overflow in wireshark:wireshark (high 7.5)
- [CVE-2017-5596](https://insights.sbomify.com/CVE-2017-5596/): Denial of service in wireshark:wireshark (high 7.5)
- [CVE-2017-5595](https://insights.sbomify.com/CVE-2017-5595/): Path traversal in zoneminder:zoneminder (medium 5.5)
- [CVE-2017-5594](https://insights.sbomify.com/CVE-2017-5594/): Pagekit Weak Password Recovery Mechanism for Forgotten Password (high 7.5)
- [CVE-2017-5593](https://insights.sbomify.com/CVE-2017-5593/): Security feature bypass in psi-plus:psi\+ (medium 5.9)
- [CVE-2017-5592](https://insights.sbomify.com/CVE-2017-5592/): Security feature bypass in profanity project:profanity (medium 5.9)
- [CVE-2017-5591](https://insights.sbomify.com/CVE-2017-5591/): SleekXMPP and Slixmpp Incorrect Implementation of Message Carbons (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/38/