# Vulnerabilities published in 2017


- [CVE-2017-3187](https://insights.sbomify.com/CVE-2017-3187/): The dotCMS administration panel, versions 3.7.1 and earlier, are vulnerable to cross-site request forgery (high 8.8)
- [CVE-2017-3186](https://insights.sbomify.com/CVE-2017-3186/): Hardcoded credentials in ACTi D, B, I, and E series cameras (critical 9.8)
- [CVE-2017-3185](https://insights.sbomify.com/CVE-2017-3185/): Information disclosure in ACTi D, B, I, and E series cameras (critical 9.8)
- [CVE-2017-3184](https://insights.sbomify.com/CVE-2017-3184/): Missing authorization in ACTi D, B, I, and E series cameras (critical 9.8)
- [CVE-2017-3183](https://insights.sbomify.com/CVE-2017-3183/): Privilege escalation in XRT Treasury (high 8.8)
- [CVE-2017-3182](https://insights.sbomify.com/CVE-2017-3182/): Security feature bypass in SDK (medium 6.8)
- [CVE-2017-3181](https://insights.sbomify.com/CVE-2017-3181/): SQL injection in Spotfire Analyst (critical 9.8)
- [CVE-2017-3180](https://insights.sbomify.com/CVE-2017-3180/): Multiple TIBCO Spotfire components fail to sanitize user-supplied inout and are vulnerable to cross-site scripting (medium 5.4)
- [CVE-2017-3169](https://insights.sbomify.com/CVE-2017-3169/): Null dereference in Apache HTTP Server (critical 9.8)
- [CVE-2017-3167](https://insights.sbomify.com/CVE-2017-3167/): Auth bypass in Apache HTTP Server (critical 9.8)
- [CVE-2017-3166](https://insights.sbomify.com/CVE-2017-3166/): Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main (high 7.8)
- [CVE-2017-3165](https://insights.sbomify.com/CVE-2017-3165/): Cross-site Scripting In Apache Brooklyn (medium 5.4)
- [CVE-2017-3164](https://insights.sbomify.com/CVE-2017-3164/): Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core (high 7.5)
- [CVE-2017-3163](https://insights.sbomify.com/CVE-2017-3163/): Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core (high 7.5)
- [CVE-2017-3162](https://insights.sbomify.com/CVE-2017-3162/): Improper Input Validation in Apache Hadoop (high 7.3)
- [CVE-2017-3161](https://insights.sbomify.com/CVE-2017-3161/): Improper Neutralization of Input During Web Page Generation in Apache Hadoop (medium 6.1)
- [CVE-2017-3160](https://insights.sbomify.com/CVE-2017-3160/): Supply chain in Apache Cordova Android (high 7.4)
- [CVE-2017-3159](https://insights.sbomify.com/CVE-2017-3159/): Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization (critical 9.8)
- [CVE-2017-3158](https://insights.sbomify.com/CVE-2017-3158/): Apache Guacamole Race Condition vulnerability (high 8.1)
- [CVE-2017-3157](https://insights.sbomify.com/CVE-2017-3157/): Information disclosure in Apache OpenOffice (medium 5.5)
- [CVE-2017-3156](https://insights.sbomify.com/CVE-2017-3156/): Covert Timing Channel in Apache CXF (high 7.5)
- [CVE-2017-3155](https://insights.sbomify.com/CVE-2017-3155/): Cross-site Scripting in Apache Atlas (medium 6.1)
- [CVE-2017-3154](https://insights.sbomify.com/CVE-2017-3154/): Apache Atlas produces Stack trace in error response (high 7.5)
- [CVE-2017-3153](https://insights.sbomify.com/CVE-2017-3153/): Cross-site Scripting in Apache Atlas (medium 6.1)
- [CVE-2017-3152](https://insights.sbomify.com/CVE-2017-3152/): Cross-site Scripting in Apache Atlas (medium 6.1)
- [CVE-2017-3151](https://insights.sbomify.com/CVE-2017-3151/): Cross-site Scripting in Apache Atlas (medium 6.1)
- [CVE-2017-3150](https://insights.sbomify.com/CVE-2017-3150/): Insecure cookie storage in Apache Atlas (medium 6.1)
- [CVE-2017-3145](https://insights.sbomify.com/CVE-2017-3145/): Improper fetch cleanup sequencing in the resolver can cause named to crash (high 7.5)
- [CVE-2017-3144](https://insights.sbomify.com/CVE-2017-3144/): Failure to properly clean up closed OMAPI connections can exhaust available sockets (medium 5.3)
- [CVE-2017-3143](https://insights.sbomify.com/CVE-2017-3143/): An error in TSIG authentication can permit unauthorized dynamic updates (high 7.5)
- [CVE-2017-3142](https://insights.sbomify.com/CVE-2017-3142/): An error in TSIG authentication can permit unauthorized zone transfers (medium 5.3)
- [CVE-2017-3141](https://insights.sbomify.com/CVE-2017-3141/): Windows service and uninstall paths are not quoted when BIND is installed (high 7.2)
- [CVE-2017-3140](https://insights.sbomify.com/CVE-2017-3140/): An error processing RPZ rules can cause named to loop endlessly after handling a query (low 3.7)
- [CVE-2017-3139](https://insights.sbomify.com/CVE-2017-3139/): Denial of service in BIND (high 7.5)
- [CVE-2017-3138](https://insights.sbomify.com/CVE-2017-3138/): named exits with a REQUIRE assertion failure if it receives a null command string on its control channel (medium 6.5)
- [CVE-2017-3137](https://insights.sbomify.com/CVE-2017-3137/): A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME (high 7.5)
- [CVE-2017-3136](https://insights.sbomify.com/CVE-2017-3136/): An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;" (medium 5.9)
- [CVE-2017-3135](https://insights.sbomify.com/CVE-2017-3135/): Combination of DNS64 and RPZ Can Lead to Crash (high 7.5)
- [CVE-2017-3134](https://insights.sbomify.com/CVE-2017-3134/): Privilege escalation in Fortinet FortiWLC-SD (high 7.2)
- [CVE-2017-3133](https://insights.sbomify.com/CVE-2017-3133/): Cross-site scripting in Fortinet FortiOS (medium 6.1)
- [CVE-2017-3132](https://insights.sbomify.com/CVE-2017-3132/): Cross-site scripting in Fortinet FortiOS (medium 6.1)
- [CVE-2017-3131](https://insights.sbomify.com/CVE-2017-3131/): Cross-site scripting in Fortinet FortiOS (medium 5.4)
- [CVE-2017-3130](https://insights.sbomify.com/CVE-2017-3130/): Information disclosure in Fortinet FortiOS (high 7.5)
- [CVE-2017-3129](https://insights.sbomify.com/CVE-2017-3129/): Cross-site scripting in Fortinet FortiWeb (medium 6.1)
- [CVE-2017-3128](https://insights.sbomify.com/CVE-2017-3128/): Cross-site scripting in Fortinet FortiOS (medium 4.8)
- [CVE-2017-3127](https://insights.sbomify.com/CVE-2017-3127/): Cross-site scripting in fortinet:fortios (medium 6.1)
- [CVE-2017-3126](https://insights.sbomify.com/CVE-2017-3126/): Open redirect in Fortinet FortiAnalyzer, FortiManager (medium 6.1)
- [CVE-2017-3125](https://insights.sbomify.com/CVE-2017-3125/): Cross-site scripting in FortiMail (medium 6.1)
- [CVE-2017-3124](https://insights.sbomify.com/CVE-2017-3124/): Memory corruption in Acrobat Reader (critical 9.8)
- [CVE-2017-3123](https://insights.sbomify.com/CVE-2017-3123/): Memory corruption in Acrobat Reader (high 8.8)
- [CVE-2017-3122](https://insights.sbomify.com/CVE-2017-3122/): Memory corruption in Acrobat Reader (medium 6.5)
- [CVE-2017-3121](https://insights.sbomify.com/CVE-2017-3121/): Memory corruption in Acrobat Reader (high 8.8)
- [CVE-2017-3120](https://insights.sbomify.com/CVE-2017-3120/): Use after free in Acrobat Reader (high 8.8)
- [CVE-2017-3119](https://insights.sbomify.com/CVE-2017-3119/): Memory corruption in Acrobat Reader (high 8.8)
- [CVE-2017-3118](https://insights.sbomify.com/CVE-2017-3118/): Security feature bypass in Acrobat Reader (medium 6.5)
- [CVE-2017-3117](https://insights.sbomify.com/CVE-2017-3117/): Memory corruption in Acrobat Reader (high 8.8)
- [CVE-2017-3116](https://insights.sbomify.com/CVE-2017-3116/): Memory corruption in Acrobat Reader (high 8.8)
- [CVE-2017-3115](https://insights.sbomify.com/CVE-2017-3115/): Information disclosure in Acrobat Reader (medium 6.5)
- [CVE-2017-3114](https://insights.sbomify.com/CVE-2017-3114/): Memory corruption in Adobe Flash Player 27.0.0.183 and earlier versions (critical 9.8)
- [CVE-2017-3113](https://insights.sbomify.com/CVE-2017-3113/): Use after free in Acrobat Reader (high 8.8)
- [CVE-2017-3112](https://insights.sbomify.com/CVE-2017-3112/): Memory corruption in Adobe Flash Player 27.0.0.183 and earlier versions (critical 9.8)
- [CVE-2017-3111](https://insights.sbomify.com/CVE-2017-3111/): Information disclosure in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0 (high 7.5)
- [CVE-2017-3110](https://insights.sbomify.com/CVE-2017-3110/): Information disclosure in Experience Manager (high 7.5)
- [CVE-2017-3109](https://insights.sbomify.com/CVE-2017-3109/): Cross-site scripting in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0 (medium 6.1)
- [CVE-2017-3108](https://insights.sbomify.com/CVE-2017-3108/): File upload in Experience Manager (critical 9.8)
- [CVE-2017-3107](https://insights.sbomify.com/CVE-2017-3107/): Misconfiguration in Experience Manager (high 7.5)
- [CVE-2017-3106](https://insights.sbomify.com/CVE-2017-3106/): Memory corruption in Flash Player (high 8.8)
- [CVE-2017-3105](https://insights.sbomify.com/CVE-2017-3105/): Open redirect in Adobe RoboHelp RH2017.0.1 and earlier versions (medium 6.1)
- [CVE-2017-3104](https://insights.sbomify.com/CVE-2017-3104/): Cross-site scripting in Adobe RoboHelp RH2017.0.1 and earlier versions (medium 6.1)
- [CVE-2017-3103](https://insights.sbomify.com/CVE-2017-3103/): Cross-site scripting in Adobe Connect 9.6.1 and earlier. (medium 6.1)
- [CVE-2017-3102](https://insights.sbomify.com/CVE-2017-3102/): Cross-site scripting in Adobe Connect 9.6.1 and earlier. (medium 6.1)
- [CVE-2017-3101](https://insights.sbomify.com/CVE-2017-3101/): Other in Adobe Connect 9.6.1 and earlier. (high 7.5)
- [CVE-2017-3100](https://insights.sbomify.com/CVE-2017-3100/): Memory corruption in Adobe Flash Player 26.0.0.131 and earlier. (medium 6.5)
- [CVE-2017-3099](https://insights.sbomify.com/CVE-2017-3099/): Memory corruption in Adobe Flash Player 26.0.0.131 and earlier. (high 8.8)
- [CVE-2017-3098](https://insights.sbomify.com/CVE-2017-3098/): Code injection in Adobe Captivate 9 and earlier. (critical 9.8)
- [CVE-2017-3097](https://insights.sbomify.com/CVE-2017-3097/): Other in Adobe Digital Editions 4.5.4 and earlier. (critical 9.8)
- [CVE-2017-3096](https://insights.sbomify.com/CVE-2017-3096/): Memory corruption in Adobe Digital Editions 4.5.4 and earlier. (critical 9.8)
- [CVE-2017-3095](https://insights.sbomify.com/CVE-2017-3095/): Memory corruption in Adobe Digital Editions 4.5.4 and earlier. (critical 9.8)
- [CVE-2017-3094](https://insights.sbomify.com/CVE-2017-3094/): Memory corruption in Adobe Digital Editions 4.5.4 and earlier. (critical 9.8)
- [CVE-2017-3093](https://insights.sbomify.com/CVE-2017-3093/): Memory corruption in Adobe Digital Editions 4.5.4 and earlier. (critical 9.8)
- [CVE-2017-3092](https://insights.sbomify.com/CVE-2017-3092/): Code injection in Adobe Digital Editions 4.5.4 and earlier. (critical 9.8)
- [CVE-2017-3091](https://insights.sbomify.com/CVE-2017-3091/): Memory corruption in Digital Editions (high 7.5)
- [CVE-2017-3090](https://insights.sbomify.com/CVE-2017-3090/): Code injection in Adobe Digital Editions 4.5.4 and earlier. (critical 9.8)
- [CVE-2017-3089](https://insights.sbomify.com/CVE-2017-3089/): Memory corruption in Adobe Digital Editions 4.5.4 and earlier. (critical 9.8)
- [CVE-2017-3088](https://insights.sbomify.com/CVE-2017-3088/): Memory corruption in Adobe Digital Editions 4.5.4 and earlier. (critical 10.0)
- [CVE-2017-3087](https://insights.sbomify.com/CVE-2017-3087/): Information disclosure in Adobe Captivate 9 and earlier. (high 7.5)
- [CVE-2017-3086](https://insights.sbomify.com/CVE-2017-3086/): Memory corruption in Adobe Shockwave 12.2.8.198 and earlier. (critical 9.8)
- [CVE-2017-3085](https://insights.sbomify.com/CVE-2017-3085/): Open redirect in Flash Player (high 7.4)
- [CVE-2017-3084](https://insights.sbomify.com/CVE-2017-3084/): Use after free in Adobe Flash Player 25.0.0.171 and earlier. (critical 9.8)
- [CVE-2017-3083](https://insights.sbomify.com/CVE-2017-3083/): Use after free in Adobe Flash Player 25.0.0.171 and earlier. (critical 9.8)
- [CVE-2017-3082](https://insights.sbomify.com/CVE-2017-3082/): Memory corruption in Adobe Flash Player 25.0.0.171 and earlier. (critical 9.8)
- [CVE-2017-3081](https://insights.sbomify.com/CVE-2017-3081/): Use after free in Adobe Flash Player 25.0.0.171 and earlier. (critical 9.8)
- [CVE-2017-3080](https://insights.sbomify.com/CVE-2017-3080/): Security feature bypass in Adobe Flash Player 26.0.0.131 and earlier. (medium 6.5)
- [CVE-2017-3079](https://insights.sbomify.com/CVE-2017-3079/): Memory corruption in Adobe Flash Player 25.0.0.171 and earlier. (critical 9.8)
- [CVE-2017-3078](https://insights.sbomify.com/CVE-2017-3078/): Memory corruption in Adobe Flash Player 25.0.0.171 and earlier. (critical 9.8)
- [CVE-2017-3077](https://insights.sbomify.com/CVE-2017-3077/): Memory corruption in Adobe Flash Player 25.0.0.171 and earlier. (critical 9.8)
- [CVE-2017-3076](https://insights.sbomify.com/CVE-2017-3076/): Memory corruption in Adobe Flash Player 25.0.0.171 and earlier. (critical 9.8)
- [CVE-2017-3075](https://insights.sbomify.com/CVE-2017-3075/): Use after free in Adobe Flash Player 25.0.0.171 and earlier. (critical 9.8)
- [CVE-2017-3074](https://insights.sbomify.com/CVE-2017-3074/): Memory corruption in Adobe Flash Player 25.0.0.148 and earlier. (high 8.8)
- [CVE-2017-3073](https://insights.sbomify.com/CVE-2017-3073/): Use after free in Adobe Flash Player 25.0.0.148 and earlier. (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/51/