CVE-2017-0897 — CyberEdge

Do I need to act?

-

0.70% chance of exploitation

EPSS score — low exploit probability

-

Not on CISA KEV list

No confirmed active exploitation reported to CISA

?

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

7

CVSS 7.5/10 High

NETWORK / LOW complexity

Expressionengine

Expressionengine

Third Party Advisory http://www.securityfocus.com/bid/99242

Vendor Advisory https://docs.expressionengine.com/latest/about/changelog.html#version-3-5-5

Vendor Advisory https://docs.expressionengine.com/v2/about/changelog.html#version-2-11-8

Vendor Advisory https://expressionengine.com/blog/expressionengine-3.5.5-and-2.11.8-released

Permissions Required https://hackerone.com/reports/215890

Third Party Advisory http://www.securityfocus.com/bid/99242

Vendor Advisory https://docs.expressionengine.com/latest/about/changelog.html#version-3-5-5

Vendor Advisory https://docs.expressionengine.com/v2/about/changelog.html#version-2-11-8

Vendor Advisory https://expressionengine.com/blog/expressionengine-3.5.5-and-2.11.8-released

Permissions Required https://hackerone.com/reports/215890