# Vulnerabilities published in 2017


- [CVE-2017-4967](https://insights.sbomify.com/CVE-2017-4967/): Cross-site scripting in Pivotal RabbitMQ (medium 6.1)
- [CVE-2017-4966](https://insights.sbomify.com/CVE-2017-4966/): Information disclosure in Pivotal RabbitMQ (high 7.8)
- [CVE-2017-4965](https://insights.sbomify.com/CVE-2017-4965/): Cross-site scripting in Pivotal RabbitMQ (medium 6.1)
- [CVE-2017-4964](https://insights.sbomify.com/CVE-2017-4964/): Code injection in Cloud Foundry Foundation BOSH Azure CPI Release v22 (high 8.8)
- [CVE-2017-4963](https://insights.sbomify.com/CVE-2017-4963/): Auth bypass in Cloud Foundry Foundation (high 8.1)
- [CVE-2017-4961](https://insights.sbomify.com/CVE-2017-4961/): Command injection in Cloud Foundry Foundation BOSH Release (high 8.8)
- [CVE-2017-4960](https://insights.sbomify.com/CVE-2017-4960/): Cloud Foundry denial of service vulnerability (high 7.5)
- [CVE-2017-4959](https://insights.sbomify.com/CVE-2017-4959/): Privilege escalation in PCF Elastic Runtime (high 8.8)
- [CVE-2017-4955](https://insights.sbomify.com/CVE-2017-4955/): Information disclosure in PCF Elastic Runtime (critical 9.8)
- [CVE-2017-4952](https://insights.sbomify.com/CVE-2017-4952/): Auth bypass in VMware Xenon (high 7.5)
- [CVE-2017-4951](https://insights.sbomify.com/CVE-2017-4951/): Cross-site request forgery in AirWatch Console (high 8.8)
- [CVE-2017-4950](https://insights.sbomify.com/CVE-2017-4950/): Integer overflow in Fusion (high 7.0)
- [CVE-2017-4949](https://insights.sbomify.com/CVE-2017-4949/): Use after free in Fusion (high 7.0)
- [CVE-2017-4948](https://insights.sbomify.com/CVE-2017-4948/): Memory corruption in Horizon Client for Windows (high 7.1)
- [CVE-2017-4947](https://insights.sbomify.com/CVE-2017-4947/): Deserialization in vRealize Automation (critical 9.8)
- [CVE-2017-4946](https://insights.sbomify.com/CVE-2017-4946/): Privilege escalation in vRealize Operations for Horizon (V4H) (high 7.8)
- [CVE-2017-4945](https://insights.sbomify.com/CVE-2017-4945/): Security feature bypass in Fusion (medium 5.5)
- [CVE-2017-4943](https://insights.sbomify.com/CVE-2017-4943/): Privilege escalation in vCenter Server Appliance (vCSA) (high 7.8)
- [CVE-2017-4942](https://insights.sbomify.com/CVE-2017-4942/): Missing authorization in Airwatch Console (medium 4.9)
- [CVE-2017-4941](https://insights.sbomify.com/CVE-2017-4941/): Memory corruption in ESXi (high 8.8)
- [CVE-2017-4940](https://insights.sbomify.com/CVE-2017-4940/): Cross-site scripting in ESXi (medium 6.1)
- [CVE-2017-4939](https://insights.sbomify.com/CVE-2017-4939/): Other in Workstation (high 7.8)
- [CVE-2017-4938](https://insights.sbomify.com/CVE-2017-4938/): Null dereference in Fusion (medium 6.5)
- [CVE-2017-4937](https://insights.sbomify.com/CVE-2017-4937/): Memory corruption in Horizon View Client for Windows (high 7.8)
- [CVE-2017-4936](https://insights.sbomify.com/CVE-2017-4936/): Memory corruption in Horizon View Client for Windows (high 7.8)
- [CVE-2017-4935](https://insights.sbomify.com/CVE-2017-4935/): Memory corruption in Horizon View Client for Windows (high 7.8)
- [CVE-2017-4934](https://insights.sbomify.com/CVE-2017-4934/): Memory corruption in Fusion (high 8.8)
- [CVE-2017-4933](https://insights.sbomify.com/CVE-2017-4933/): Memory corruption in ESXi (high 8.8)
- [CVE-2017-4932](https://insights.sbomify.com/CVE-2017-4932/): Privilege escalation in VMware AirWatch Launcher for Android (AWL) (high 7.8)
- [CVE-2017-4931](https://insights.sbomify.com/CVE-2017-4931/): Code injection in VMware AirWatch Console (AWC) (high 7.8)
- [CVE-2017-4930](https://insights.sbomify.com/CVE-2017-4930/): Cross-site scripting in VMware AirWatch Console (AWC) (medium 5.4)
- [CVE-2017-4929](https://insights.sbomify.com/CVE-2017-4929/): Cross-site scripting in NSX Edge (medium 6.1)
- [CVE-2017-4928](https://insights.sbomify.com/CVE-2017-4928/): Server-side request forgery in vSphere Web Client (high 7.5)
- [CVE-2017-4927](https://insights.sbomify.com/CVE-2017-4927/): Denial of service in vCenter Server (high 7.5)
- [CVE-2017-4926](https://insights.sbomify.com/CVE-2017-4926/): Cross-site scripting in vCenter Server (medium 5.4)
- [CVE-2017-4925](https://insights.sbomify.com/CVE-2017-4925/): Null dereference in ESXi (medium 5.5)
- [CVE-2017-4924](https://insights.sbomify.com/CVE-2017-4924/): Memory corruption in ESXi (high 8.8)
- [CVE-2017-4923](https://insights.sbomify.com/CVE-2017-4923/): Information disclosure in vmware:vcenter server (critical 9.8)
- [CVE-2017-4922](https://insights.sbomify.com/CVE-2017-4922/): Information disclosure in vmware:vcenter server (medium 6.5)
- [CVE-2017-4921](https://insights.sbomify.com/CVE-2017-4921/): Privilege escalation in vmware:vcenter server (high 8.8)
- [CVE-2017-4920](https://insights.sbomify.com/CVE-2017-4920/): Denial of service in NSX-V Edge (medium 5.9)
- [CVE-2017-4919](https://insights.sbomify.com/CVE-2017-4919/): Auth bypass in VMware vCenter Server (critical 9.0)
- [CVE-2017-4918](https://insights.sbomify.com/CVE-2017-4918/): Command injection in Horizon View Client for Mac (critical 9.8)
- [CVE-2017-4917](https://insights.sbomify.com/CVE-2017-4917/): Weak cryptography in vSphere Data Protection (VDP) (critical 9.8)
- [CVE-2017-4916](https://insights.sbomify.com/CVE-2017-4916/): Null dereference in Workstation Pro/Player (medium 6.5)
- [CVE-2017-4915](https://insights.sbomify.com/CVE-2017-4915/): Privilege escalation in Workstation Pro/Player (high 7.8)
- [CVE-2017-4914](https://insights.sbomify.com/CVE-2017-4914/): Deserialization in vSphere Data Protection (VDP) (critical 9.8)
- [CVE-2017-4913](https://insights.sbomify.com/CVE-2017-4913/): Integer overflow in Horizon View Client for Windows (high 7.8)
- [CVE-2017-4912](https://insights.sbomify.com/CVE-2017-4912/): Memory corruption in Horizon View Client for Windows (high 7.8)
- [CVE-2017-4911](https://insights.sbomify.com/CVE-2017-4911/): Memory corruption in Horizon View Client for Windows (high 7.8)
- [CVE-2017-4910](https://insights.sbomify.com/CVE-2017-4910/): Memory corruption in Horizon View Client for Windows (high 7.8)
- [CVE-2017-4909](https://insights.sbomify.com/CVE-2017-4909/): Memory corruption in Horizon View Client for Windows (high 7.8)
- [CVE-2017-4908](https://insights.sbomify.com/CVE-2017-4908/): Memory corruption in Horizon View Client for Windows (high 7.8)
- [CVE-2017-4907](https://insights.sbomify.com/CVE-2017-4907/): Memory corruption in Horizon View (critical 9.8)
- [CVE-2017-4905](https://insights.sbomify.com/CVE-2017-4905/): Information disclosure in ESXi (medium 5.5)
- [CVE-2017-4904](https://insights.sbomify.com/CVE-2017-4904/): Memory corruption in ESXi (high 8.8)
- [CVE-2017-4903](https://insights.sbomify.com/CVE-2017-4903/): Memory corruption in ESXi (high 8.8)
- [CVE-2017-4902](https://insights.sbomify.com/CVE-2017-4902/): Memory corruption in ESXi (high 8.8)
- [CVE-2017-4901](https://insights.sbomify.com/CVE-2017-4901/): Memory corruption in Fusion Pro / Fusion (critical 9.9)
- [CVE-2017-4900](https://insights.sbomify.com/CVE-2017-4900/): Null dereference in Workstation Pro/Player (medium 5.5)
- [CVE-2017-4899](https://insights.sbomify.com/CVE-2017-4899/): Memory corruption in Workstation Pro/Player (medium 4.7)
- [CVE-2017-4898](https://insights.sbomify.com/CVE-2017-4898/): Privilege escalation in Workstation Pro/Player (high 8.8)
- [CVE-2017-4897](https://insights.sbomify.com/CVE-2017-4897/): Other in Horizon DaaS (medium 5.5)
- [CVE-2017-4896](https://insights.sbomify.com/CVE-2017-4896/): Weak cryptography in Airwatch Console (low 3.8)
- [CVE-2017-4895](https://insights.sbomify.com/CVE-2017-4895/): Security feature bypass in Airwatch Agent (high 8.8)
- [CVE-2017-4057](https://insights.sbomify.com/CVE-2017-4057/): Privilege escalation in Advanced Threat Defense (ATD) (high 8.8)
- [CVE-2017-4055](https://insights.sbomify.com/CVE-2017-4055/): Auth bypass in Advanced Threat Defense (ATD) (high 7.5)
- [CVE-2017-4054](https://insights.sbomify.com/CVE-2017-4054/): Command injection in Advanced Threat Defense (ATD) (high 8.8)
- [CVE-2017-4053](https://insights.sbomify.com/CVE-2017-4053/): Command injection in Advanced Threat Defense (ATD) (critical 9.8)
- [CVE-2017-4052](https://insights.sbomify.com/CVE-2017-4052/): Auth bypass in Advanced Threat Defense (ATD) (critical 9.8)
- [CVE-2017-4028](https://insights.sbomify.com/CVE-2017-4028/): SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability (medium 5.0)
- [CVE-2017-4017](https://insights.sbomify.com/CVE-2017-4017/): Information disclosure in Network Data Loss Prevention (NDLP) (medium 5.3)
- [CVE-2017-4016](https://insights.sbomify.com/CVE-2017-4016/): Information disclosure in Network Data Loss Prevention (NDLP) (medium 5.3)
- [CVE-2017-4015](https://insights.sbomify.com/CVE-2017-4015/): Other in Network Data Loss Prevention (NDLP) (medium 4.5)
- [CVE-2017-4014](https://insights.sbomify.com/CVE-2017-4014/): Auth bypass in Network Data Loss Prevention (NDLP) (high 8.0)
- [CVE-2017-4013](https://insights.sbomify.com/CVE-2017-4013/): Information disclosure in Network Data Loss Prevention (NDLP) (medium 5.3)
- [CVE-2017-4012](https://insights.sbomify.com/CVE-2017-4012/): Privilege escalation in Network Data Loss Prevention (NDLP) (medium 6.5)
- [CVE-2017-4011](https://insights.sbomify.com/CVE-2017-4011/): Cross-site scripting in Network Data Loss Prevention (NDLP) (medium 6.1)
- [CVE-2017-3980](https://insights.sbomify.com/CVE-2017-3980/): Path traversal in ePolicy Orchestrator (ePO) (high 7.2)
- [CVE-2017-3972](https://insights.sbomify.com/CVE-2017-3972/): SB10192 - Network Security Management (NSM) - Infrastructure-based foot printing vulnerability (high 8.3)
- [CVE-2017-3971](https://insights.sbomify.com/CVE-2017-3971/): SB10192 - Network Security Management (NSM) - Cryptanalysis vulnerability (high 8.2)
- [CVE-2017-3969](https://insights.sbomify.com/CVE-2017-3969/): SB10192 - Network Security Management (NSM) - Abuse of communication channels vulnerability (high 8.2)
- [CVE-2017-3968](https://insights.sbomify.com/CVE-2017-3968/): Auth bypass in Network Data Loss Prevention (NDLP) (high 7.5)
- [CVE-2017-3967](https://insights.sbomify.com/CVE-2017-3967/): SB10192 - Network Security Management (NSM) - Target influence via framing vulnerability (medium 6.1)
- [CVE-2017-3966](https://insights.sbomify.com/CVE-2017-3966/): Information disclosure in Network Security Management (NSM) (medium 6.4)
- [CVE-2017-3965](https://insights.sbomify.com/CVE-2017-3965/): SB10192 - Network Security Management (NSM) - Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability (high 8.8)
- [CVE-2017-3964](https://insights.sbomify.com/CVE-2017-3964/): SB10192 - Network Security Management (NSM) - Reflective Cross-Site Scripting (XSS) vulnerability (low 3.5)
- [CVE-2017-3962](https://insights.sbomify.com/CVE-2017-3962/): McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability (medium 5.6)
- [CVE-2017-3961](https://insights.sbomify.com/CVE-2017-3961/): SB10192 - Network Security Management (NSM) - Cross-Site Scripting (XSS) vulnerability (low 3.5)
- [CVE-2017-3960](https://insights.sbomify.com/CVE-2017-3960/): McAfee Network Security Management (NSM) - Exploitation of Authorization vulnerability (medium 5.9)
- [CVE-2017-3948](https://insights.sbomify.com/CVE-2017-3948/): Cross-site scripting in Data Loss Prevention Endpoint (DLPe) (medium 5.4)
- [CVE-2017-3936](https://insights.sbomify.com/CVE-2017-3936/): McAfee ePolicy Orchestrator (ePO) - OS Command Injection vulnerability (medium 6.2)
- [CVE-2017-3935](https://insights.sbomify.com/CVE-2017-3935/): Other in Network Data Loss Prevention (high 7.5)
- [CVE-2017-3934](https://insights.sbomify.com/CVE-2017-3934/): Misconfiguration in Network Data Loss Prevention (medium 5.9)
- [CVE-2017-3933](https://insights.sbomify.com/CVE-2017-3933/): Cross-site scripting in Network Data Loss Prevention (medium 5.4)
- [CVE-2017-3912](https://insights.sbomify.com/CVE-2017-3912/): Auth bypass in McAfee Application Control and Change Control (MACC) (medium 4.4)
- [CVE-2017-3907](https://insights.sbomify.com/CVE-2017-3907/): McAfee Threat Intelligence Exchange (TIE) Server - Code Injection vulnerability (medium 5.4)
- [CVE-2017-3902](https://insights.sbomify.com/CVE-2017-3902/): Cross-site scripting in ePO (medium 5.4)
- [CVE-2017-3899](https://insights.sbomify.com/CVE-2017-3899/): SQL injection in Advanced Threat Defense (ATD) (medium 6.5)
- [CVE-2017-3898](https://insights.sbomify.com/CVE-2017-3898/): Security feature bypass in Live Safe (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/44/