Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-afss-mcgj-7bce
Vulnerability ID VCID-afss-mcgj-7bce
Aliases CVE-2017-11691
Summary Cross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00506 https://api.first.org/data/v1/epss?cve=CVE-2017-11691
epss 0.00506 https://api.first.org/data/v1/epss?cve=CVE-2017-11691
epss 0.00506 https://api.first.org/data/v1/epss?cve=CVE-2017-11691
epss 0.00506 https://api.first.org/data/v1/epss?cve=CVE-2017-11691
epss 0.00506 https://api.first.org/data/v1/epss?cve=CVE-2017-11691
epss 0.00506 https://api.first.org/data/v1/epss?cve=CVE-2017-11691
epss 0.00506 https://api.first.org/data/v1/epss?cve=CVE-2017-11691
epss 0.00506 https://api.first.org/data/v1/epss?cve=CVE-2017-11691
epss 0.00506 https://api.first.org/data/v1/epss?cve=CVE-2017-11691
archlinux Medium https://security.archlinux.org/AVG-365
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2017-11691
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11691
869848 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869848
ASA-201707-30 https://security.archlinux.org/ASA-201707-30
AVG-365 https://security.archlinux.org/AVG-365
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.66154
EPSS Score 0.00506
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:32:22.659238+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0