
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2017-17477 affects Pexip Infinity versions before 17. The vulnerability allows an unauthenticated remote attacker to achieve stored XSS (Cross-Site Scripting) via management web interface views (NIST NVD, MITRE CVE).
The vulnerability is a stored Cross-Site Scripting (XSS) issue that affects the management web interface views of Pexip Infinity. The vulnerability can be exploited by an unauthenticated remote attacker, indicating a significant security weakness in the input validation mechanisms of the management interface (NIST NVD).
The vulnerability allows attackers to inject malicious scripts that are stored on the server and executed when other users access the affected management web interface views. This could lead to theft of sensitive information, session hijacking, or other malicious actions performed in the context of authenticated users (NIST NVD).
The vulnerability can be exploited by an unauthenticated remote attacker, making it particularly concerning as it requires no special privileges or user interaction to exploit (NIST NVD).
The primary mitigation is to upgrade to Pexip Infinity version 17 or later, which contains fixes for this vulnerability (NIST NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."