# Vulnerabilities published in 2017


- [CVE-2017-3897](https://insights.sbomify.com/CVE-2017-3897/): Code injection in Live Safe (critical 9.8)
- [CVE-2017-3896](https://insights.sbomify.com/CVE-2017-3896/): Other in McAfee Agent (medium 5.9)
- [CVE-2017-3894](https://insights.sbomify.com/CVE-2017-3894/): Cross-site scripting in BES12 (medium 6.1)
- [CVE-2017-3893](https://insights.sbomify.com/CVE-2017-3893/): Incomplete vulnerability mitigations (low 1.9)
- [CVE-2017-3892](https://insights.sbomify.com/CVE-2017-3892/): Information disclosure in QNX Software Development Platform (SDP) (low 3.8)
- [CVE-2017-3891](https://insights.sbomify.com/CVE-2017-3891/): Privilege escalation in QNX Software Development Platform (QNX SDP) (critical 9.6)
- [CVE-2017-3890](https://insights.sbomify.com/CVE-2017-3890/): Cross-site scripting in BlackBerry WatchDox Server (medium 6.1)
- [CVE-2017-3889](https://insights.sbomify.com/CVE-2017-3889/): Open redirect in Cisco Registered Envelope Service (medium 6.1)
- [CVE-2017-3888](https://insights.sbomify.com/CVE-2017-3888/): Cross-site scripting in Cisco Unified Communications Manager (medium 5.4)
- [CVE-2017-3887](https://insights.sbomify.com/CVE-2017-3887/): Denial of service in Cisco Firepower Detection Engine (medium 5.9)
- [CVE-2017-3886](https://insights.sbomify.com/CVE-2017-3886/): SQL injection in Cisco Unified Communications Manager (medium 4.9)
- [CVE-2017-3885](https://insights.sbomify.com/CVE-2017-3885/): Denial of service in Cisco Firepower Detection Engine (medium 5.9)
- [CVE-2017-3884](https://insights.sbomify.com/CVE-2017-3884/): Information disclosure in Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (medium 6.5)
- [CVE-2017-3883](https://insights.sbomify.com/CVE-2017-3883/): Denial of service in cisco:firepower extensible operating system (high 8.6)
- [CVE-2017-3882](https://insights.sbomify.com/CVE-2017-3882/): Memory corruption in Cisco CVR100W Wireless-N VPN Router (critical 9.6)
- [CVE-2017-3881](https://insights.sbomify.com/CVE-2017-3881/): Cisco IOS and IOS XE Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-3880](https://insights.sbomify.com/CVE-2017-3880/): Auth bypass in Cisco WebEx Meetings Server (medium 6.5)
- [CVE-2017-3879](https://insights.sbomify.com/CVE-2017-3879/): Memory corruption in Cisco Nexus 9000 Series Switches (medium 5.3)
- [CVE-2017-3878](https://insights.sbomify.com/CVE-2017-3878/): Memory corruption in Cisco Nexus 9000 Series Switches (medium 5.3)
- [CVE-2017-3877](https://insights.sbomify.com/CVE-2017-3877/): Cross-site request forgery in Cisco Unified Communications Manager (medium 6.5)
- [CVE-2017-3876](https://insights.sbomify.com/CVE-2017-3876/): Denial of service in Cisco IOS XR (high 7.5)
- [CVE-2017-3875](https://insights.sbomify.com/CVE-2017-3875/): Security feature bypass in Cisco Nexus 7000 Series Switches (medium 5.3)
- [CVE-2017-3874](https://insights.sbomify.com/CVE-2017-3874/): Cross-site scripting in Cisco Unified Communications Manager (medium 5.4)
- [CVE-2017-3873](https://insights.sbomify.com/CVE-2017-3873/): Code injection in Cisco Aironet 1800, 2800, and 3800 Series Access Points (high 7.5)
- [CVE-2017-3872](https://insights.sbomify.com/CVE-2017-3872/): Cross-site scripting in Cisco Unified Communications Manager (medium 6.1)
- [CVE-2017-3871](https://insights.sbomify.com/CVE-2017-3871/): Information disclosure in Cisco Prime Optical for Service Providers (medium 4.3)
- [CVE-2017-3870](https://insights.sbomify.com/CVE-2017-3870/): Security feature bypass in Cisco Web Security Appliance (medium 5.8)
- [CVE-2017-3869](https://insights.sbomify.com/CVE-2017-3869/): Missing authorization in Cisco Prime Infrastructure (medium 5.4)
- [CVE-2017-3868](https://insights.sbomify.com/CVE-2017-3868/): Cross-site scripting in Cisco UCS Director (medium 6.1)
- [CVE-2017-3867](https://insights.sbomify.com/CVE-2017-3867/): Security feature bypass in Cisco Adaptive Security Appliance (medium 5.3)
- [CVE-2017-3866](https://insights.sbomify.com/CVE-2017-3866/): Cross-site scripting in Cisco Prime Service Catalog (medium 6.1)
- [CVE-2017-3865](https://insights.sbomify.com/CVE-2017-3865/): Denial of service in Cisco StarOS for ASR 5000 Series Routers (medium 5.8)
- [CVE-2017-3864](https://insights.sbomify.com/CVE-2017-3864/): Denial of service in Cisco IOS and IOS XE (high 8.6)
- [CVE-2017-3863](https://insights.sbomify.com/CVE-2017-3863/): Memory corruption in Cisco IOS and IOS XE (high 8.6)
- [CVE-2017-3862](https://insights.sbomify.com/CVE-2017-3862/): Memory corruption in Cisco IOS and IOS XE (high 8.6)
- [CVE-2017-3861](https://insights.sbomify.com/CVE-2017-3861/): Memory corruption in Cisco IOS and IOS XE (high 8.6)
- [CVE-2017-3860](https://insights.sbomify.com/CVE-2017-3860/): Memory corruption in Cisco IOS and IOS XE (high 8.6)
- [CVE-2017-3859](https://insights.sbomify.com/CVE-2017-3859/): Memory corruption in Cisco IOS XE Software for Cisco ASR 920 Series Routers (high 7.5)
- [CVE-2017-3858](https://insights.sbomify.com/CVE-2017-3858/): Command injection in Cisco IOS XE (high 8.8)
- [CVE-2017-3857](https://insights.sbomify.com/CVE-2017-3857/): Denial of service in Cisco IOS and IOS XE (high 7.5)
- [CVE-2017-3856](https://insights.sbomify.com/CVE-2017-3856/): Denial of service in Cisco IOS XE (high 7.5)
- [CVE-2017-3854](https://insights.sbomify.com/CVE-2017-3854/): Auth bypass in Cisco Meshed Wireless LAN Controller (high 8.8)
- [CVE-2017-3853](https://insights.sbomify.com/CVE-2017-3853/): Memory corruption in Cisco IOx (critical 9.8)
- [CVE-2017-3852](https://insights.sbomify.com/CVE-2017-3852/): Path traversal in Cisco Application-Hosting Framework (high 8.1)
- [CVE-2017-3851](https://insights.sbomify.com/CVE-2017-3851/): Path traversal in Cisco Application-Hosting Framework (high 7.5)
- [CVE-2017-3850](https://insights.sbomify.com/CVE-2017-3850/): Denial of service in Cisco IOS and IOS XE (medium 5.9)
- [CVE-2017-3849](https://insights.sbomify.com/CVE-2017-3849/): Denial of service in Cisco IOS and IOS XE (high 7.4)
- [CVE-2017-3848](https://insights.sbomify.com/CVE-2017-3848/): Cross-site scripting in Cisco Prime Infrastructure (medium 6.1)
- [CVE-2017-3847](https://insights.sbomify.com/CVE-2017-3847/): Cross-site scripting in Cisco Firepower Management Center Web Framework (medium 5.4)
- [CVE-2017-3846](https://insights.sbomify.com/CVE-2017-3846/): Path traversal in Cisco Workload Automation and Tidal Enterprise Scheduler Client Manager Server (high 8.6)
- [CVE-2017-3845](https://insights.sbomify.com/CVE-2017-3845/): Cross-site scripting in Cisco Prime Collaboration Assurance (medium 6.1)
- [CVE-2017-3844](https://insights.sbomify.com/CVE-2017-3844/): Information disclosure in Cisco Prime Collaboration Assurance (medium 4.3)
- [CVE-2017-3843](https://insights.sbomify.com/CVE-2017-3843/): Path traversal in Cisco Prime Collaboration Assurance (medium 4.3)
- [CVE-2017-3842](https://insights.sbomify.com/CVE-2017-3842/): Information disclosure in Cisco Intrusion Prevention System Device Manager (medium 5.3)
- [CVE-2017-3841](https://insights.sbomify.com/CVE-2017-3841/): Information disclosure in Cisco Secure Access Control System (high 7.5)
- [CVE-2017-3840](https://insights.sbomify.com/CVE-2017-3840/): Open redirect in Cisco Secure Access Control System (medium 6.1)
- [CVE-2017-3839](https://insights.sbomify.com/CVE-2017-3839/): XML external entity in Cisco Secure Access Control System (medium 4.3)
- [CVE-2017-3838](https://insights.sbomify.com/CVE-2017-3838/): Cross-site scripting in Cisco Secure Access Control System (medium 6.1)
- [CVE-2017-3837](https://insights.sbomify.com/CVE-2017-3837/): Information disclosure in Cisco Meeting Server (high 8.1)
- [CVE-2017-3836](https://insights.sbomify.com/CVE-2017-3836/): Information disclosure in Cisco Unified Communications Manager (medium 4.3)
- [CVE-2017-3835](https://insights.sbomify.com/CVE-2017-3835/): SQL injection in Cisco Identity Services Engine (high 8.8)
- [CVE-2017-3834](https://insights.sbomify.com/CVE-2017-3834/): Hardcoded credentials in Cisco Aironet 1830 Series and 1850 Series Access Points (critical 9.8)
- [CVE-2017-3833](https://insights.sbomify.com/CVE-2017-3833/): Cross-site scripting in Cisco Unified Communications Manager (medium 6.1)
- [CVE-2017-3832](https://insights.sbomify.com/CVE-2017-3832/): Denial of service in Cisco Wireless LAN Controller (high 7.5)
- [CVE-2017-3831](https://insights.sbomify.com/CVE-2017-3831/): Auth bypass in Cisco Mobility Express 1800 Access Point Series (critical 9.8)
- [CVE-2017-3830](https://insights.sbomify.com/CVE-2017-3830/): Denial of service in Cisco Meeting Server (high 7.5)
- [CVE-2017-3829](https://insights.sbomify.com/CVE-2017-3829/): Cross-site scripting in Cisco Unified Communications Manager (medium 6.1)
- [CVE-2017-3828](https://insights.sbomify.com/CVE-2017-3828/): Cross-site scripting in Cisco Unified Communications Manager (medium 6.1)
- [CVE-2017-3827](https://insights.sbomify.com/CVE-2017-3827/): Security feature bypass in Cisco AsyncOS Software for Cisco ESA and Cisco WSA (medium 5.8)
- [CVE-2017-3826](https://insights.sbomify.com/CVE-2017-3826/): Denial of service in Cisco NetFlow Generation Appliance (high 7.5)
- [CVE-2017-3825](https://insights.sbomify.com/CVE-2017-3825/): Denial of service in Cisco TelePresence (high 7.5)
- [CVE-2017-3824](https://insights.sbomify.com/CVE-2017-3824/): Memory corruption in Cisco IOS XE 15.x (medium 6.8)
- [CVE-2017-3823](https://insights.sbomify.com/CVE-2017-3823/): Memory corruption in Cisco WebEx browser extensions (high 8.8)
- [CVE-2017-3822](https://insights.sbomify.com/CVE-2017-3822/): Other in Cisco Firepower Threat Defense Software versions 6.1.x (medium 5.3)
- [CVE-2017-3821](https://insights.sbomify.com/CVE-2017-3821/): Cross-site scripting in Cisco Unified Communications Manager (medium 6.1)
- [CVE-2017-3820](https://insights.sbomify.com/CVE-2017-3820/): Denial of service in Cisco IOS XE 15.x (medium 6.5)
- [CVE-2017-3819](https://insights.sbomify.com/CVE-2017-3819/): Privilege escalation in Cisco StarOS (high 8.8)
- [CVE-2017-3818](https://insights.sbomify.com/CVE-2017-3818/): Security feature bypass in Cisco AsyncOS 9.7.1-066 (medium 5.8)
- [CVE-2017-3817](https://insights.sbomify.com/CVE-2017-3817/): Missing authorization in Cisco UCS Director (medium 4.3)
- [CVE-2017-3815](https://insights.sbomify.com/CVE-2017-3815/): Auth bypass in Cisco TelePresence Server (medium 5.3)
- [CVE-2017-3814](https://insights.sbomify.com/CVE-2017-3814/): Security feature bypass in Cisco Firepower System Software 5.x 6.x (medium 5.8)
- [CVE-2017-3813](https://insights.sbomify.com/CVE-2017-3813/): Privilege escalation in Cisco AnyConnect Secure Mobility Client Software for Windows Versions prior to released versions 4.4.00243 and later and 4.3.05017 and later. (high 7.8)
- [CVE-2017-3812](https://insights.sbomify.com/CVE-2017-3812/): Denial of service in Cisco Industrial Ethernet 2000 Switches 15.2(5.4.32i)E2 (medium 6.8)
- [CVE-2017-3811](https://insights.sbomify.com/CVE-2017-3811/): XML external entity in Cisco WebEx Meetings Server (medium 6.5)
- [CVE-2017-3810](https://insights.sbomify.com/CVE-2017-3810/): Open redirect in Cisco Prime Service Catalog 10.0 R2 tanggula (medium 5.4)
- [CVE-2017-3809](https://insights.sbomify.com/CVE-2017-3809/): Other in Cisco Firepower Management Center (FMC) 6.1.0 6.2.0 (medium 5.8)
- [CVE-2017-3808](https://insights.sbomify.com/CVE-2017-3808/): Denial of service in Cisco Unified Communications Manager (high 7.5)
- [CVE-2017-3807](https://insights.sbomify.com/CVE-2017-3807/): Memory corruption in Cisco ASA Software with Clientless SSL VPN portal is enabled Major Releases 9.0-9.6 (high 8.8)
- [CVE-2017-3806](https://insights.sbomify.com/CVE-2017-3806/): Command injection in Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance 2.0(1.68) (medium 5.3)
- [CVE-2017-3805](https://insights.sbomify.com/CVE-2017-3805/): Information disclosure in Cisco IOS and Cisco IOx (medium 5.3)
- [CVE-2017-3804](https://insights.sbomify.com/CVE-2017-3804/): Denial of service in Cisco Nexus 5000, 6000, 7000 (medium 6.1)
- [CVE-2017-3803](https://insights.sbomify.com/CVE-2017-3803/): Denial of service in Cisco IOS (medium 4.7)
- [CVE-2017-3802](https://insights.sbomify.com/CVE-2017-3802/): Cross-site scripting in Cisco Unified Communications Manager 12.0(0.99000.9) (medium 6.1)
- [CVE-2017-3801](https://insights.sbomify.com/CVE-2017-3801/): Privilege escalation in Cisco UCS Director versions 6.0.0.0 and 6.0.0.1 (high 8.8)
- [CVE-2017-3800](https://insights.sbomify.com/CVE-2017-3800/): Security feature bypass in Cisco AsyncOS (medium 5.8)
- [CVE-2017-3799](https://insights.sbomify.com/CVE-2017-3799/): Open redirect in Cisco WebEx Meeting Center T28.1 (medium 5.4)
- [CVE-2017-3798](https://insights.sbomify.com/CVE-2017-3798/): Cross-site scripting in Cisco Unified Communications Manager (medium 6.1)
- [CVE-2017-3797](https://insights.sbomify.com/CVE-2017-3797/): Information disclosure in Cisco WebEx Meetings Server 2.7 (medium 5.3)
- [CVE-2017-3796](https://insights.sbomify.com/CVE-2017-3796/): Command injection in Cisco WebEx Meetings Server 2.6 (high 7.2)
- [CVE-2017-3795](https://insights.sbomify.com/CVE-2017-3795/): Auth bypass in Cisco WebEx Meetings Server 2.6 (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/45/