CVE-2017-8017

moderate-risk

Published 2017-10-11

EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Do I need to act?

0.29% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.1/10 Medium

NETWORK / LOW complexity

Affected Products (4)

Smarts Network Configuration Manager

Affected Vendors

Emc

References (6)

Mailing List http://seclists.org/fulldisclosure/2017/Oct/11

Third Party Advisory http://www.securityfocus.com/bid/101194

Third Party Advisory http://www.securitytracker.com/id/1039517

Mailing List http://seclists.org/fulldisclosure/2017/Oct/11

Third Party Advisory http://www.securityfocus.com/bid/101194

Third Party Advisory http://www.securitytracker.com/id/1039517

/ 100

moderate-risk

Severity 23/34 · High

Exploitability 1/34 · Minimal

Exposure 10/34 · Low