Search for vulnerabilities
Vulnerability details: VCID-uza9-68u2-ukdu
Vulnerability ID VCID-uza9-68u2-ukdu
Aliases CVE-2017-7089
Summary
Status Published
Exploitability 2.0
Weighted Severity 3.6
Risk 7.2
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
epss 0.04871 https://api.first.org/data/v1/epss?cve=CVE-2017-7089
cvssv3 7.2 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2017-7089
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7089
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
CVE-2017-7089 Exploit https://github.com/Bo0oM/CVE-2017-7089/tree/7355e388e49c77ba0cac70cd486fdb94c03b26b5
CVE-2017-7089 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/local/45866.html
USN-3460-1 https://usn.ubuntu.com/3460-1/
Data source Exploit-DB
Date added Nov. 15, 2018
Description Webkit (Safari) - Universal Cross-site Scripting
Ransomware campaign use Unknown
Source publication date Oct. 3, 2017
Exploit type local
Platform multiple
Source update date Nov. 15, 2018
Source URL https://github.com/Bo0oM/CVE-2017-7089/tree/7355e388e49c77ba0cac70cd486fdb94c03b26b5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.89149
EPSS Score 0.04871
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:41:28.227414+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/3460-1/ 37.0.0