CVE-2017-7352

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the "host" parameter on the 'System > Configuration > SNMP > Add SNMP Trap Manager' screen.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Oct 11, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-73579.1Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by import CVE-2017-73587.3In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path loc CVE-2017-73596.1Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.CVE-2017-73606.1Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.CVE-2017-73616.1Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.CVE-2017-73626.1Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.CVE-2017-73636.1Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.CVE-2017-73649.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_da CVE-2017-73657.8In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated.CVE-2017-73665.5In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.CVE-2017-73677.8In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image.CVE-2017-73687.0In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver.