CVE-2017-15194

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-151954.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of another user.CVE-2017-151964.3In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user.CVE-2017-151974.3In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user.CVE-2017-151984.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of another user.CVE-2017-151994.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstraCVE-2017-15203.7IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication typeCVE-2017-152004.3In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user.CVE-2017-152014.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user.CVE-2017-152024.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user.CVE-2017-152034.3In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user.CVE-2017-152044.3In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user.CVE-2017-152054.3In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user.
CVE-2017-15194: Medium severity, CVSS 6.1 | Vulnix