CVEs published May 26, 2017
25 CVEs were published on May 26, 2017: 1 critical, 1 high. 2 are now in CISA KEV.
- Published
- 25
- Critical
- 1
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 23
- Now in CISA KEV
- 2
- Fix available
- 2
Most affected products
- Microsoft Malware Protection Engine
- 7
- Fortinet FortiPortal
- 5
- IBM Maximo Asset Management
- 2
- Apache Software Foundation Apache Knox · org.apache.knox:ga…
- 1
- contao/core
- 1
- exiv2
- 1
- foreman
- 1
- Fortinet FortiAnalyzer, FortiManager
- 1
- Fortinet FortiWeb
- 1
- Fortinet FortiWLC-SD
- 1
Critical 1
High 1
Medium, low and unrated 23
- CVE-2017-3126An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to executeFortinet FortiAnalyzer, FortiManager
- CVE-2017-3129A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands Fortinet FortiWeb
- CVE-2017-3134An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI coFortinet FortiWLC-SD
- CVE-2017-7337An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VFortinet FortiPortal
- CVE-2017-7338A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure Fortinet FortiPortal
- CVE-2017-7339A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or comFortinet FortiPortal
- CVE-2017-7343An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url Fortinet FortiPortal
- CVE-2017-7731A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure Fortinet FortiPortal
- CVE-2017-5646For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while aApache Software Foundation Apache Knox · org.apache.knox:ga…
- CVE-2017-8535The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPMicrosoft Malware Protection Engine
- CVE-2017-8536The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPMicrosoft Malware Protection Engine
- CVE-2017-8537The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPMicrosoft Malware Protection Engine
- CVE-2017-8538The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPMicrosoft Malware Protection Engine
- CVE-2017-8539The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPMicrosoft Malware Protection Engine
- CVE-2017-8541The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPMicrosoft Malware Protection Engine
- CVE-2017-8542The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPMicrosoft Malware Protection
- CVE-2015-0269Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view filescontao/core
- CVE-2016-10375Yodl before 3.07.01 has a Buffer Over-read in the queue_push function in queue/queuepush.c.
- CVE-2017-1291IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks.IBM Maximo Asset Management
- CVE-2017-1292IBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive information that could be used in further attacIBM Maximo Asset Management
- CVE-2017-1325IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.IBM iNotes
- CVE-2017-7505Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigforeman
- CVE-2017-9239An issue was discovered in Exiv2 0.26.exiv2