# Vulnerabilities published in 2017


- [CVE-2017-3292](https://insights.sbomify.com/CVE-2017-3292/): Information disclosure in PeopleSoft Enterprise PT PeopleTools (medium 5.7)
- [CVE-2017-3291](https://insights.sbomify.com/CVE-2017-3291/): Other in MySQL Server 5.5.53andearlier;5.6.34andearlier;5.7.16andearlier (medium 6.3)
- [CVE-2017-3290](https://insights.sbomify.com/CVE-2017-3290/): Other in VM VirtualBox (high 7.9)
- [CVE-2017-3289](https://insights.sbomify.com/CVE-2017-3289/): Other in Java SE (critical 9.6)
- [CVE-2017-3288](https://insights.sbomify.com/CVE-2017-3288/): Other in FLEXCUBE Investor Servicing (medium 5.4)
- [CVE-2017-3287](https://insights.sbomify.com/CVE-2017-3287/): Other in iStore (high 8.2)
- [CVE-2017-3286](https://insights.sbomify.com/CVE-2017-3286/): Other in Applications DBA (medium 6.0)
- [CVE-2017-3285](https://insights.sbomify.com/CVE-2017-3285/): Other in Service Fulfillment Manager (high 8.2)
- [CVE-2017-3284](https://insights.sbomify.com/CVE-2017-3284/): Other in Service Fulfillment Manager (high 8.2)
- [CVE-2017-3283](https://insights.sbomify.com/CVE-2017-3283/): Other in Partner Management (medium 4.7)
- [CVE-2017-3282](https://insights.sbomify.com/CVE-2017-3282/): Other in Partner Management (medium 4.7)
- [CVE-2017-3281](https://insights.sbomify.com/CVE-2017-3281/): Other in Partner Management (medium 4.7)
- [CVE-2017-3280](https://insights.sbomify.com/CVE-2017-3280/): Other in Partner Management (medium 4.7)
- [CVE-2017-3279](https://insights.sbomify.com/CVE-2017-3279/): Other in Leads Management (high 8.2)
- [CVE-2017-3278](https://insights.sbomify.com/CVE-2017-3278/): Other in One-to-One Fulfillment (high 8.2)
- [CVE-2017-3277](https://insights.sbomify.com/CVE-2017-3277/): Information disclosure in Applications Manager (medium 4.9)
- [CVE-2017-3276](https://insights.sbomify.com/CVE-2017-3276/): Other in Solaris Operating System (medium 5.7)
- [CVE-2017-3275](https://insights.sbomify.com/CVE-2017-3275/): Other in Email Center (high 8.2)
- [CVE-2017-3274](https://insights.sbomify.com/CVE-2017-3274/): Other in Email Center (high 8.2)
- [CVE-2017-3273](https://insights.sbomify.com/CVE-2017-3273/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2017-3272](https://insights.sbomify.com/CVE-2017-3272/): Other in Java SE (critical 9.6)
- [CVE-2017-3271](https://insights.sbomify.com/CVE-2017-3271/): Other in Outside In Technology (high 8.6)
- [CVE-2017-3270](https://insights.sbomify.com/CVE-2017-3270/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2017-3269](https://insights.sbomify.com/CVE-2017-3269/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2017-3268](https://insights.sbomify.com/CVE-2017-3268/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2017-3267](https://insights.sbomify.com/CVE-2017-3267/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2017-3266](https://insights.sbomify.com/CVE-2017-3266/): Other in Outside In Technology (critical 9.8)
- [CVE-2017-3265](https://insights.sbomify.com/CVE-2017-3265/): Other in MySQL Server (medium 5.6)
- [CVE-2017-3264](https://insights.sbomify.com/CVE-2017-3264/): Other in Siebel UI Framework (low 3.1)
- [CVE-2017-3263](https://insights.sbomify.com/CVE-2017-3263/): Other in Primavera P6 Enterprise Project Portfolio Management (high 8.1)
- [CVE-2017-3262](https://insights.sbomify.com/CVE-2017-3262/): Information disclosure in Java SE (medium 5.3)
- [CVE-2017-3261](https://insights.sbomify.com/CVE-2017-3261/): Information disclosure in Java JavaSE:6u131;7u121;8u112;JavaSEEmbedded:8u111 (medium 4.3)
- [CVE-2017-3260](https://insights.sbomify.com/CVE-2017-3260/): Other in Java SE (high 8.3)
- [CVE-2017-3259](https://insights.sbomify.com/CVE-2017-3259/): Information disclosure in Java SE (low 3.7)
- [CVE-2017-3258](https://insights.sbomify.com/CVE-2017-3258/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2017-3257](https://insights.sbomify.com/CVE-2017-3257/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2017-3256](https://insights.sbomify.com/CVE-2017-3256/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2017-3255](https://insights.sbomify.com/CVE-2017-3255/): Information disclosure in JDeveloper (medium 5.8)
- [CVE-2017-3254](https://insights.sbomify.com/CVE-2017-3254/): Other in Retail Invoice Matching (high 7.6)
- [CVE-2017-3253](https://insights.sbomify.com/CVE-2017-3253/): Denial of service in JRockit (high 7.5)
- [CVE-2017-3252](https://insights.sbomify.com/CVE-2017-3252/): Other in Java JavaSE:6u131;7u121;8u112;JavaSEEmbedded:8u111;JRockit:R28.3.12 (medium 5.8)
- [CVE-2017-3251](https://insights.sbomify.com/CVE-2017-3251/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2017-3250](https://insights.sbomify.com/CVE-2017-3250/): Information disclosure in GlassFish Server (high 7.3)
- [CVE-2017-3249](https://insights.sbomify.com/CVE-2017-3249/): Other in GlassFish Server (high 7.3)
- [CVE-2017-3248](https://insights.sbomify.com/CVE-2017-3248/): Other in WebLogic Server (critical 9.8)
- [CVE-2017-3247](https://insights.sbomify.com/CVE-2017-3247/): Other in GlassFish Server (medium 4.3)
- [CVE-2017-3246](https://insights.sbomify.com/CVE-2017-3246/): Other in Application Object Library (medium 6.0)
- [CVE-2017-3245](https://insights.sbomify.com/CVE-2017-3245/): Information disclosure in FLEXCUBE Direct Banking (medium 4.7)
- [CVE-2017-3244](https://insights.sbomify.com/CVE-2017-3244/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2017-3243](https://insights.sbomify.com/CVE-2017-3243/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2017-3242](https://insights.sbomify.com/CVE-2017-3242/): Denial of service in LDOMS (medium 5.9)
- [CVE-2017-3241](https://insights.sbomify.com/CVE-2017-3241/): Other in JRockit (critical 9.0)
- [CVE-2017-3240](https://insights.sbomify.com/CVE-2017-3240/): Information disclosure in Oracle Database (low 3.3)
- [CVE-2017-3239](https://insights.sbomify.com/CVE-2017-3239/): Information disclosure in GlassFish Server (low 3.3)
- [CVE-2017-3238](https://insights.sbomify.com/CVE-2017-3238/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2017-3237](https://insights.sbomify.com/CVE-2017-3237/): Other in Automatic Service Request (ASR) (high 7.8)
- [CVE-2017-3236](https://insights.sbomify.com/CVE-2017-3236/): Other in FLEXCUBE Universal Banking (medium 4.7)
- [CVE-2017-3235](https://insights.sbomify.com/CVE-2017-3235/): Other in FLEXCUBE Universal Banking (low 3.5)
- [CVE-2017-3234](https://insights.sbomify.com/CVE-2017-3234/): Other in Automatic Service Request (ASR) (critical 9.8)
- [CVE-2017-3233](https://insights.sbomify.com/CVE-2017-3233/): Other in Automatic Service Request (ASR) (high 7.5)
- [CVE-2017-3232](https://insights.sbomify.com/CVE-2017-3232/): Information disclosure in Automatic Service Request (ASR) (medium 5.5)
- [CVE-2017-3231](https://insights.sbomify.com/CVE-2017-3231/): Information disclosure in Java SE (medium 4.3)
- [CVE-2017-3230](https://insights.sbomify.com/CVE-2017-3230/): Other in Fusion Middleware MapViewer (high 8.6)
- [CVE-2017-3226](https://insights.sbomify.com/CVE-2017-3226/): Weak cryptography in U-Boot (medium 6.4)
- [CVE-2017-3225](https://insights.sbomify.com/CVE-2017-3225/): Weak cryptography in U-Boot (medium 4.6)
- [CVE-2017-3224](https://insights.sbomify.com/CVE-2017-3224/): Other in Protocol (high 8.2)
- [CVE-2017-3223](https://insights.sbomify.com/CVE-2017-3223/): Memory corruption in IP Camera (critical 9.8)
- [CVE-2017-3222](https://insights.sbomify.com/CVE-2017-3222/): Hardcoded credentials in AmosConnect (critical 9.8)
- [CVE-2017-3221](https://insights.sbomify.com/CVE-2017-3221/): SQL injection in AmosConnect (critical 9.8)
- [CVE-2017-3219](https://insights.sbomify.com/CVE-2017-3219/): Weak cryptography in True Image (high 8.8)
- [CVE-2017-3218](https://insights.sbomify.com/CVE-2017-3218/): Weak cryptography in Magician (high 8.8)
- [CVE-2017-3217](https://insights.sbomify.com/CVE-2017-3217/): Auth bypass in LMU 3030 OBD-II (high 8.1)
- [CVE-2017-3216](https://insights.sbomify.com/CVE-2017-3216/): Auth bypass in BM2022 (critical 9.8)
- [CVE-2017-3215](https://insights.sbomify.com/CVE-2017-3215/): Auth bypass in ONE-KEY (medium 5.3)
- [CVE-2017-3214](https://insights.sbomify.com/CVE-2017-3214/): Hardcoded credentials in ONE-KEY (high 7.5)
- [CVE-2017-3213](https://insights.sbomify.com/CVE-2017-3213/): Weak cryptography in Think Mutual Bank Mobile Banking (medium 5.9)
- [CVE-2017-3212](https://insights.sbomify.com/CVE-2017-3212/): Weak cryptography in Space Coast Credit Union Mobile (medium 5.9)
- [CVE-2017-3211](https://insights.sbomify.com/CVE-2017-3211/): Centire Yopify leaks customer information (medium 5.3)
- [CVE-2017-3210](https://insights.sbomify.com/CVE-2017-3210/): Misconfiguration in SDK (high 7.8)
- [CVE-2017-3209](https://insights.sbomify.com/CVE-2017-3209/): Misconfiguration in U818A WiFi Quadcopter Drone (high 8.1)
- [CVE-2017-3208](https://insights.sbomify.com/CVE-2017-3208/): XML external entity in themidnightcoders:weborb for java (critical 9.8)
- [CVE-2017-3207](https://insights.sbomify.com/CVE-2017-3207/): Deserialization in WebORB for Java (critical 9.8)
- [CVE-2017-3206](https://insights.sbomify.com/CVE-2017-3206/): XML external entity in Flamingo amf-serializer (critical 9.8)
- [CVE-2017-3204](https://insights.sbomify.com/CVE-2017-3204/): golang.org/x/crypto/ssh Man-in-the-Middle attack (high 8.1)
- [CVE-2017-3203](https://insights.sbomify.com/CVE-2017-3203/): Pivotal/Spring Spring-flex's Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization (high 8.1)
- [CVE-2017-3202](https://insights.sbomify.com/CVE-2017-3202/): Deserialization of Untrusted Data in Flamingo amf-serializer (critical 9.8)
- [CVE-2017-3201](https://insights.sbomify.com/CVE-2017-3201/): Deserialization in Flamingo amf-serializer (high 8.1)
- [CVE-2017-3200](https://insights.sbomify.com/CVE-2017-3200/): GraniteDS Insecure Deserialization (high 8.1)
- [CVE-2017-3199](https://insights.sbomify.com/CVE-2017-3199/): GraniteDS, version 3.1.1.GA, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization (high 8.1)
- [CVE-2017-3198](https://insights.sbomify.com/CVE-2017-3198/): GIGABYTE BRIX UEFI firmware is not cryptographically signed (critical 9.8)
- [CVE-2017-3197](https://insights.sbomify.com/CVE-2017-3197/): GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection (critical 9.8)
- [CVE-2017-3196](https://insights.sbomify.com/CVE-2017-3196/): Memory corruption in ASUS PCE-AC56 WLAN Card Utilities (high 7.8)
- [CVE-2017-3195](https://insights.sbomify.com/CVE-2017-3195/): Memory corruption in Service Pack 6 (critical 9.8)
- [CVE-2017-3194](https://insights.sbomify.com/CVE-2017-3194/): Security feature bypass in Pandora iOS App (high 8.1)
- [CVE-2017-3193](https://insights.sbomify.com/CVE-2017-3193/): Memory corruption in DIR-850L and potentially others (high 8.8)
- [CVE-2017-3192](https://insights.sbomify.com/CVE-2017-3192/): Information disclosure in DIR-130 (critical 9.8)
- [CVE-2017-3191](https://insights.sbomify.com/CVE-2017-3191/): Auth bypass in DIR-130 (critical 9.8)
- [CVE-2017-3190](https://insights.sbomify.com/CVE-2017-3190/): Security feature bypass in Flash Seats Mobile App (high 7.5)
- [CVE-2017-3189](https://insights.sbomify.com/CVE-2017-3189/): File upload in Administration Panel (high 8.1)
- [CVE-2017-3188](https://insights.sbomify.com/CVE-2017-3188/): Path traversal in Administration Panel (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/50/