Back to Database
Status published
Medium
CVE-2017-17832
ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site...
Vulnerability Description
ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settings_SMS_ALERT_TYPE parameter, and JavaScript can be executed on settings-save.html (the Settings - SMS Alerts page).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-17832
Credits & Attribution
No credits recorded in the NVD database.
References
More from serverscheck
View All →CVE-2018-18552
ServersCheck Monitoring Software through 14.3.3 allows local users to cause...
Medium
6.5
CVE-2018-18551
ServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS...
Medium
6.1
CVE-2018-18550
ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an...
High
8.8
CVE-2005-1798
Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0...
Medium
5
Affected Vendor
serverscheck
View all reports →Affected Software
monitoring software
Vulnerable Versions:
0
Timeline
Official Publish:
December 22nd, 2017
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.