CVE-2017-9356: sitecore sitecore.net – CVSS 6.1 · Watchpost

← All vulnerabilities

CVE-2017-9356

中危 6.1CVE-2017-9356 · Published 23/06/2017 · updated 17/06/2026

要点

CVE-2017-9356 是影响 sitecore.net (sitecore) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.78%，高于 55.9% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
sitecore.net sitecore	`= 7.1= 7.2`	No fix yet

Description

Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI.

References

seclists.org/bugtraq/2017/Jun/43 · Exploit
securityfocus.com/bid/99239 · Third Party Advisory

sitecore.net 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free