System	Score	Found at
epss	0.59378	https://api.first.org/data/v1/epss?cve=CVE-2017-0372
cvssv2	7.5	https://nvd.nist.gov/vuln/detail/CVE-2017-0372
cvssv3	9.8	https://nvd.nist.gov/vuln/detail/CVE-2017-0372
archlinux	Medium	https://security.archlinux.org/AVG-259

Reference id	Reference type	URL
		https://api.first.org/data/v1/epss?cve=CVE-2017-0372
		https://bugs.debian.org/861585
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0372
		https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html
		https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000209.html
		https://phabricator.wikimedia.org/T158689
		https://security-tracker.debian.org/tracker/CVE-2017-0372
861585		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861585
AVG-259		https://security.archlinux.org/AVG-259
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.27.1:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.1:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.27.2:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.2:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVE-2017-0372		https://nvd.nist.gov/vuln/detail/CVE-2017-0372

No exploits are available.

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2017-0372

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2017-0372

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Percentile	0.98106
EPSS Score	0.59378
Published At	June 30, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-01T11:54:43.176026+00:00	Arch Linux Importer	Import	https://security.archlinux.org/AVG-259	36.1.3