CVE-2017-17677

Description

References

• docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html · Release Notes
• seclists.org/fulldisclosure/2017/Oct/52 · Mailing List

More vulnerabilities in remedy mid-tier

• CVE-2024-34398MEDIUM 4.2An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers.
• CVE-2024-34399CRITICAL 9.8**UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04. An unauthenticated remote attacker is able to access an…
• CVE-2017-17678MEDIUM 6.1BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripting (XSS). A DOM-based cross-site scripting vulnerability was discovered in a leg…
• CVE-2017-17675MEDIUM 5.3BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker t…
• CVE-2017-17674CRITICAL 9.8BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the syst…