CVE-2017-17477
Pexip Infinity Management Node vulnerability analysis and mitigation

Overview

CVE-2017-17477 affects Pexip Infinity versions before 17. The vulnerability allows an unauthenticated remote attacker to achieve stored XSS (Cross-Site Scripting) via management web interface views (NIST NVD, MITRE CVE).

Technical details

The vulnerability is a stored Cross-Site Scripting (XSS) issue that affects the management web interface views of Pexip Infinity. The vulnerability can be exploited by an unauthenticated remote attacker, indicating a significant security weakness in the input validation mechanisms of the management interface (NIST NVD).

Impact

The vulnerability allows attackers to inject malicious scripts that are stored on the server and executed when other users access the affected management web interface views. This could lead to theft of sensitive information, session hijacking, or other malicious actions performed in the context of authenticated users (NIST NVD).

Exploitability

The vulnerability can be exploited by an unauthenticated remote attacker, making it particularly concerning as it requires no special privileges or user interaction to exploit (NIST NVD).

Mitigation and workarounds

The primary mitigation is to upgrade to Pexip Infinity version 17 or later, which contains fixes for this vulnerability (NIST NVD).

Additional resources


SourceThis report was generated using AI

Related Pexip Infinity Management Node vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-59683CRITICAL9.1
  • Pexip Infinity Management Node logoPexip Infinity Management Node
  • cpe:2.3:a:pexip:pexip_infinity
NoYesDec 25, 2025
CVE-2025-66379HIGH7.5
  • Pexip Infinity Management Node logoPexip Infinity Management Node
  • cpe:2.3:a:pexip:pexip_infinity
NoYesDec 25, 2025
CVE-2025-66378HIGH7.5
  • Pexip Infinity Management Node logoPexip Infinity Management Node
  • cpe:2.3:a:pexip:pexip_infinity
NoYesDec 25, 2025
CVE-2025-66377HIGH7.5
  • Pexip Infinity Management Node logoPexip Infinity Management Node
  • cpe:2.3:a:pexip:pexip_infinity
NoYesDec 25, 2025
CVE-2025-66443MEDIUM5.3
  • Pexip Infinity Management Node logoPexip Infinity Management Node
  • cpe:2.3:a:pexip:pexip_infinity
NoYesDec 25, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management