CVE-2017-12567
SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2.
Read MoreAuthor: Cyberthreat Blog
CVE-2017-12647
XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title.
Read MoreCVE-2017-12645
XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId.
Read MoreCVE-2017-12646
XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address.
Read MoreCVE-2017-12648
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL.
Read More