# Vulnerabilities published in 2017


- [CVE-2017-3794](https://insights.sbomify.com/CVE-2017-3794/): Cross-site request forgery in Cisco WebEx Meetings Server 2.6 (high 8.8)
- [CVE-2017-3793](https://insights.sbomify.com/CVE-2017-3793/): Denial of service in Cisco ASA Software and Cisco FTD Software (medium 4.0)
- [CVE-2017-3792](https://insights.sbomify.com/CVE-2017-3792/): Memory corruption in Cisco TelePresence Multipoint Control Unit (MCU) software version 4.3(1.68) or later configured for Passthrough content mode (critical 9.8)
- [CVE-2017-3791](https://insights.sbomify.com/CVE-2017-3791/): Auth bypass in Cisco Prime Home versions from 6.3.0.0 to the first fixed release 6.5.0.1 (critical 10.0)
- [CVE-2017-3790](https://insights.sbomify.com/CVE-2017-3790/): Memory corruption in Cisco Expressway Series Software and Cisco TelePresence VCS Software All versions prior to version X8.8.2 are vulnerable (high 8.6)
- [CVE-2017-3776](https://insights.sbomify.com/CVE-2017-3776/): Information disclosure in Help mobile Android app (high 7.5)
- [CVE-2017-3775](https://insights.sbomify.com/CVE-2017-3775/): Security feature bypass in Some Lenovo Flex System and Lenovo System x products (medium 6.4)
- [CVE-2017-3774](https://insights.sbomify.com/CVE-2017-3774/): Memory corruption in IMM2 (critical 9.8)
- [CVE-2017-3772](https://insights.sbomify.com/CVE-2017-3772/): Denial of service in PC Manager (medium 5.5)
- [CVE-2017-3771](https://insights.sbomify.com/CVE-2017-3771/): Misconfiguration in E95, ThinkCentre M710s/M710t (high 7.5)
- [CVE-2017-3770](https://insights.sbomify.com/CVE-2017-3770/): Privilege escalation in Lenovo XClarity Administrator (LXCA) (high 8.8)
- [CVE-2017-3768](https://insights.sbomify.com/CVE-2017-3768/): Denial of service in Integrated Management Module 2 (IMM2) (high 7.5)
- [CVE-2017-3767](https://insights.sbomify.com/CVE-2017-3767/): Privilege escalation in Realtek Audio Driver (high 7.8)
- [CVE-2017-3765](https://insights.sbomify.com/CVE-2017-3765/): Auth bypass in Enterprise Network Operating System affecting Lenovo and IBM RackSwitch and BladeCenter Products (high 7.0)
- [CVE-2017-3764](https://insights.sbomify.com/CVE-2017-3764/): Information disclosure in xClarity Administrator (medium 5.3)
- [CVE-2017-3763](https://insights.sbomify.com/CVE-2017-3763/): Information disclosure in Lenovo XClarity Administrator (LXCA) (medium 6.7)
- [CVE-2017-3762](https://insights.sbomify.com/CVE-2017-3762/): Hardcoded credentials in Lenovo Fingerprint Manager Pro (high 7.8)
- [CVE-2017-3761](https://insights.sbomify.com/CVE-2017-3761/): Command injection in Service Framework application (critical 9.8)
- [CVE-2017-3760](https://insights.sbomify.com/CVE-2017-3760/): Weak cryptography in Service Framework application (high 8.1)
- [CVE-2017-3759](https://insights.sbomify.com/CVE-2017-3759/): Other in Service Framework application (high 8.1)
- [CVE-2017-3758](https://insights.sbomify.com/CVE-2017-3758/): Missing authorization in Service Framework application (critical 9.8)
- [CVE-2017-3757](https://insights.sbomify.com/CVE-2017-3757/): Privilege escalation in Lenovo ElanTech Touchpad driver (high 7.8)
- [CVE-2017-3756](https://insights.sbomify.com/CVE-2017-3756/): Privilege escalation in ThinkPad Active Protection System (high 7.8)
- [CVE-2017-3754](https://insights.sbomify.com/CVE-2017-3754/): Security feature bypass in Lenovo Notebook BIOS (medium 6.7)
- [CVE-2017-3753](https://insights.sbomify.com/CVE-2017-3753/): Code injection in Desktop and Notebook BIOS (medium 6.8)
- [CVE-2017-3752](https://insights.sbomify.com/CVE-2017-3752/): Other in Lenovo and IBM Switch Products (high 8.2)
- [CVE-2017-3751](https://insights.sbomify.com/CVE-2017-3751/): Privilege escalation in ThinkPad Compact USB Keyboard with TrackPoint Driver (high 7.8)
- [CVE-2017-3750](https://insights.sbomify.com/CVE-2017-3750/): Privilege escalation in Lenovo Vibe and Lenovo China-only Moto Mobile Phones (medium 6.4)
- [CVE-2017-3749](https://insights.sbomify.com/CVE-2017-3749/): Privilege escalation in Lenovo Vibe and Lenovo China-only Moto Mobile Phones (medium 6.4)
- [CVE-2017-3748](https://insights.sbomify.com/CVE-2017-3748/): Privilege escalation in Lenovo Vibe and Lenovo China-only Moto Mobile Phones (high 7.8)
- [CVE-2017-3747](https://insights.sbomify.com/CVE-2017-3747/): Privilege escalation in Lenovo Nerve Center (medium 5.5)
- [CVE-2017-3746](https://insights.sbomify.com/CVE-2017-3746/): Privilege escalation in ThinkPad USB 3.0 Ethernet Adapter Driver (high 7.8)
- [CVE-2017-3745](https://insights.sbomify.com/CVE-2017-3745/): Information disclosure in XClarity Administrator (high 7.8)
- [CVE-2017-3744](https://insights.sbomify.com/CVE-2017-3744/): Information disclosure in Lenovo System x IMM2 (medium 6.5)
- [CVE-2017-3743](https://insights.sbomify.com/CVE-2017-3743/): Information disclosure in ToolsCenter (high 7.5)
- [CVE-2017-3742](https://insights.sbomify.com/CVE-2017-3742/): Information disclosure in Lenovo Connect2 (medium 4.8)
- [CVE-2017-3741](https://insights.sbomify.com/CVE-2017-3741/): Other in Power Management Driver (low 3.3)
- [CVE-2017-3740](https://insights.sbomify.com/CVE-2017-3740/): Missing authorization in Active Protection System (medium 5.5)
- [CVE-2017-3738](https://insights.sbomify.com/CVE-2017-3738/): Integer overflow in OpenSSL (medium 5.9)
- [CVE-2017-3737](https://insights.sbomify.com/CVE-2017-3737/): Memory corruption in OpenSSL (medium 5.9)
- [CVE-2017-3736](https://insights.sbomify.com/CVE-2017-3736/): Weak cryptography in OpenSSL (medium 6.5)
- [CVE-2017-3735](https://insights.sbomify.com/CVE-2017-3735/): Memory corruption in OpenSSL (medium 5.3)
- [CVE-2017-3733](https://insights.sbomify.com/CVE-2017-3733/): Encrypt-Then-Mac renegotiation crash (high 7.5)
- [CVE-2017-3732](https://insights.sbomify.com/CVE-2017-3732/): BN_mod_exp may produce incorrect results on x86_64 (medium 5.9)
- [CVE-2017-3731](https://insights.sbomify.com/CVE-2017-3731/): Truncated packet could crash via OOB read (high 7.5)
- [CVE-2017-3730](https://insights.sbomify.com/CVE-2017-3730/): Bad (EC)DHE parameters cause a client crash (high 7.5)
- [CVE-2017-3718](https://insights.sbomify.com/CVE-2017-3718/): Misconfiguration in Intel(R) NUC (medium 6.2)
- [CVE-2017-3653](https://insights.sbomify.com/CVE-2017-3653/): Other in MySQL Server (low 3.1)
- [CVE-2017-3652](https://insights.sbomify.com/CVE-2017-3652/): Other in MySQL Server (medium 4.2)
- [CVE-2017-3651](https://insights.sbomify.com/CVE-2017-3651/): Other in MySQL Server (medium 4.3)
- [CVE-2017-3650](https://insights.sbomify.com/CVE-2017-3650/): Information disclosure in MySQL Server (low 3.7)
- [CVE-2017-3649](https://insights.sbomify.com/CVE-2017-3649/): Denial of service in oracle:mysql (medium 4.4)
- [CVE-2017-3648](https://insights.sbomify.com/CVE-2017-3648/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2017-3647](https://insights.sbomify.com/CVE-2017-3647/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2017-3646](https://insights.sbomify.com/CVE-2017-3646/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2017-3645](https://insights.sbomify.com/CVE-2017-3645/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2017-3644](https://insights.sbomify.com/CVE-2017-3644/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2017-3643](https://insights.sbomify.com/CVE-2017-3643/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2017-3642](https://insights.sbomify.com/CVE-2017-3642/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2017-3641](https://insights.sbomify.com/CVE-2017-3641/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2017-3640](https://insights.sbomify.com/CVE-2017-3640/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2017-3639](https://insights.sbomify.com/CVE-2017-3639/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2017-3638](https://insights.sbomify.com/CVE-2017-3638/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2017-3637](https://insights.sbomify.com/CVE-2017-3637/): Denial of service in MySQL Server (medium 5.3)
- [CVE-2017-3636](https://insights.sbomify.com/CVE-2017-3636/): Other in MySQL Server (medium 5.3)
- [CVE-2017-3635](https://insights.sbomify.com/CVE-2017-3635/): Denial of service in MySQL Server (medium 5.3)
- [CVE-2017-3634](https://insights.sbomify.com/CVE-2017-3634/): Denial of service in oracle:mysql (medium 6.5)
- [CVE-2017-3633](https://insights.sbomify.com/CVE-2017-3633/): Other in Communications Policy Management (medium 6.5)
- [CVE-2017-3632](https://insights.sbomify.com/CVE-2017-3632/): Other in Solaris Operating System (critical 9.8)
- [CVE-2017-3631](https://insights.sbomify.com/CVE-2017-3631/): Memory corruption in Solaris Operating System (medium 5.3)
- [CVE-2017-3630](https://insights.sbomify.com/CVE-2017-3630/): Memory corruption in Solaris Operating System (medium 5.3)
- [CVE-2017-3629](https://insights.sbomify.com/CVE-2017-3629/): Memory corruption in Solaris Operating System (high 7.8)
- [CVE-2017-3626](https://insights.sbomify.com/CVE-2017-3626/): Information disclosure in GlassFish Server (low 3.1)
- [CVE-2017-3625](https://insights.sbomify.com/CVE-2017-3625/): Other in WebCenter Content (high 8.2)
- [CVE-2017-3623](https://insights.sbomify.com/CVE-2017-3623/): Other in Solaris Operating System (critical 10.0)
- [CVE-2017-3622](https://insights.sbomify.com/CVE-2017-3622/): Privilege escalation in Solaris Operating System (high 7.8)
- [CVE-2017-3621](https://insights.sbomify.com/CVE-2017-3621/): Denial of service in Sun ZFS Storage Appliance Kit (AK) Software (high 7.5)
- [CVE-2017-3620](https://insights.sbomify.com/CVE-2017-3620/): Other in Automatic Service Request (ASR) (high 7.8)
- [CVE-2017-3619](https://insights.sbomify.com/CVE-2017-3619/): Information disclosure in Automatic Service Request (ASR) (medium 5.5)
- [CVE-2017-3618](https://insights.sbomify.com/CVE-2017-3618/): Other in Automatic Service Request (ASR) (high 7.1)
- [CVE-2017-3617](https://insights.sbomify.com/CVE-2017-3617/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3616](https://insights.sbomify.com/CVE-2017-3616/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3615](https://insights.sbomify.com/CVE-2017-3615/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3614](https://insights.sbomify.com/CVE-2017-3614/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3613](https://insights.sbomify.com/CVE-2017-3613/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3612](https://insights.sbomify.com/CVE-2017-3612/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3611](https://insights.sbomify.com/CVE-2017-3611/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3610](https://insights.sbomify.com/CVE-2017-3610/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3609](https://insights.sbomify.com/CVE-2017-3609/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3608](https://insights.sbomify.com/CVE-2017-3608/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3607](https://insights.sbomify.com/CVE-2017-3607/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3606](https://insights.sbomify.com/CVE-2017-3606/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3605](https://insights.sbomify.com/CVE-2017-3605/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3604](https://insights.sbomify.com/CVE-2017-3604/): Other in Oracle Berkeley DB (high 7.0)
- [CVE-2017-3603](https://insights.sbomify.com/CVE-2017-3603/): Information disclosure in WebCenter Sites (low 3.1)
- [CVE-2017-3602](https://insights.sbomify.com/CVE-2017-3602/): Other in WebCenter Sites (high 8.1)
- [CVE-2017-3601](https://insights.sbomify.com/CVE-2017-3601/): Other in API Gateway (high 8.1)
- [CVE-2017-3600](https://insights.sbomify.com/CVE-2017-3600/): Other in MySQL Server (medium 6.6)
- [CVE-2017-3599](https://insights.sbomify.com/CVE-2017-3599/): Integer overflow in oracle:mysql (high 7.5)
- [CVE-2017-3598](https://insights.sbomify.com/CVE-2017-3598/): Information disclosure in WebCenter Sites (low 3.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/46/