CVE-2017-8017

EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scripting Vulnerability…

Medium6.1EPSS 1.1%

Published: 11 Oct 2017
Updated: 5 Aug 2024
Reserved: 21 Apr 2017
Assigned by: dell

Description

EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Timeline

2017
21 Apr 2017
21 Apr 2017
ID reserved
By dell
11 Oct 20176 months later
11 Oct 2017· 6 months later
Published
2024
5 Aug 20247 years later
5 Aug 2024· 7 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2017-8017, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	3.0	Medium6.1	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS (exploitation in 30 days): 1.1% · top 34% of all CVEs (8 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.1.

Weakness

Reflected Cross-Site Scripting Vulnerability
CWE-79 (opens in a new tab)All about CWE-79 and its CVEs

Affected products

EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, 9.4.2.x
- affected EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, 9.4.2.x

References (3)

http://seclists.org/fulldisclosure/2017/Oct/11 (opens in a new tab)x_refsource_CONFIRMx_transferred
1039517 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
101194 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2017-8017](https://cveledger.app/badge/CVE-2017-8017.svg)](https://cveledger.app/cve/CVE-2017-8017)

Record last updated 5 Aug 2024, 16:19 UTC.