Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2017-12637 SAP NetWeaver Directory Traversal Vulnerability HIGH 7.5 N/A cvelistv5 2025-03-19
cve-2017-12635 couchdb: Privilege escalation via _users documents with duplicate keys for 'roles' MEDIUM 6.5 N/A cvelistv5 2025-11-21
cve-2017-12617 Apache Tomcat Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2022-03-25
cve-2017-12615 tomcat: Remote Code Execution via JSP Upload HIGH 8.1 N/A cvelistv5 2026-08-04
cve-2017-12542 A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found. CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2017-12319 Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2017-12240 Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2017-12238 Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2017-12237 Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2017-12235 Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2017-12234 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2017-12233 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2017-12232 Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2017-12231 Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2017-12149 Red Hat JBoss Application Server Remote Code Execution Vulnerability CRITICAL N/A N/A cvelistv5 2021-12-10
cve-2017-11882 Microsoft Office Memory Corruption Vulnerability HIGH 7.8 N/A cvelistv5 2021-11-03
cve-2017-11826 Microsoft Office Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2017-11774 Microsoft Office Outlook Security Feature Bypass Vulnerability HIGH N/A N/A cvelistv5 2021-11-03
cve-2017-11610 supervisor: Command injection via malicious XML-RPC request HIGH 7.0 N/A cvelistv5 2026-05-13
cve-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-01-26
cve-2017-11317 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-04-11
cve-2017-11292 Adobe Flash Player Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2017-10974 Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about use of an initial /%5C sequence to defeat traversal protection mechanisms; the initial /%5C sequence was apparently not discussed in earlier research on this product. HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2017-10271 Oracle Corporation WebLogic Server Remote Code Execution Vulnerability CRITICAL N/A N/A cvelistv5 2022-02-10
cve-2017-1000486 Primetek Primefaces Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2022-01-10
cve-2017-1000353 jenkins: Unauthenticated remote code execution (SECURITY-429) HIGH 8.1 N/A cvelistv5 2025-11-21
cve-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability CRITICAL N/A N/A cvelistv5 2024-09-09
cve-2017-1000170 CVE-2017-1000170 HIGH N/A N/A cvelistv5
cve-2017-1000028 Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request. HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2017-0263 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-02-10