CVE-2017-6803
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-6803
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that (1) change the admin password, (2) terminate the scheduler, or (3) possibly execute arbitrary commands via crafted requests to Admin/XML/Result.xml.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SolarWinds FTP Voyager Scheduler 跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SolarWinds (前称Serv-U) FTP Voyager Scheduler是美国SolarWinds公司的一套工作任务安排调度的应用程序。 SolarWinds FTP Voyager 16.2.0版本中的Scheduler的Web界面存在跨站请求伪造漏洞。远程攻击者可利用该漏洞更改admin密码，终止调度程序，执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2017-6803
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-6803
Please Login to view more intelligence information
Same Patch Batch · n/a · 2017-03-20 · 52 CVEs total
| CVE-2017-6550 | Kinsey Infor-Lawson SQL注入漏洞 | |
| CVE-2017-7186 | PCRE2和PCRE 安全漏洞 | |
| CVE-2014-9938 | Git 安全漏洞 | |
| CVE-2017-6836 | Audio File Library 缓冲区错误漏洞 | |
| CVE-2017-6839 | Audio File Library 数字错误漏洞 | |
| CVE-2017-6838 | Audio File Library 数字错误漏洞 | |
| CVE-2017-6837 | Audio File Library 安全漏洞 | |
| CVE-2017-7187 | Linux kernel 安全漏洞 | |
| CVE-2017-6829 | Audio File Library 安全漏洞 | |
| CVE-2017-6805 | Mobatek MobaXterm Personal Edition 路径遍历漏洞 | |
| CVE-2017-6830 | Audio File Library 缓冲区错误漏洞 | |
| CVE-2017-6356 | Palo Alto Networks Terminal Services Agent 信息泄露漏洞 | |
| CVE-2017-6318 | sane-backends 信息泄露漏洞 | |
| CVE-2017-6178 | USBPcap 安全漏洞 | |
| CVE-2017-6058 | QEMU 缓冲区错误漏洞 | |
| CVE-2017-5987 | QEMU 安全漏洞 | |
| CVE-2017-5956 | QEMU virglrenderer 安全漏洞 | |
| CVE-2017-5930 | PostfixAdmin 安全漏洞 | |
| CVE-2017-5618 | GNU Screen 权限许可和访问控制问题漏洞 | |
| CVE-2016-9165 | CA Unified Infrastructure Management和CA Unified Infrastructure Management Snap 安全漏洞 |
Showing top 20 of 52 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-8193
Akaunting Invoice PDF Rendering dompdf.php server-side reque - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out- - CVE-2026-8187
Open5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumption - CVE-2026-6667
PgBouncer missing authorization check in KILL_CLIENT admin c
V. Comments for CVE-2017-6803
No comments yet