Search for vulnerabilities
Vulnerability details: VCID-zx77-xapa-gfcr
Vulnerability ID VCID-zx77-xapa-gfcr
Aliases CVE-2017-12159
GHSA-7fmw-85qm-h22p
Summary
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-613 Insufficient Session Expiration
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-352 Cross-Site Request Forgery (CSRF)
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3.1 7.5 https://access.redhat.com/errata/RHSA-2017:2904
generic_textual HIGH https://access.redhat.com/errata/RHSA-2017:2904
cvssv3.1 7.5 https://access.redhat.com/errata/RHSA-2017:2905
generic_textual HIGH https://access.redhat.com/errata/RHSA-2017:2905
cvssv3.1 7.5 https://access.redhat.com/errata/RHSA-2017:2906
generic_textual HIGH https://access.redhat.com/errata/RHSA-2017:2906
cvssv3 5.4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12159.json
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
epss 0.01452 https://api.first.org/data/v1/epss?cve=CVE-2017-12159
cvssv3.1 7.5 https://bugzilla.redhat.com/show_bug.cgi?id=1484111
generic_textual HIGH https://bugzilla.redhat.com/show_bug.cgi?id=1484111
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-7fmw-85qm-h22p
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2017-12159
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2017-12159
cvssv3.1 7.5 https://web.archive.org/web/20210124113906/http://www.securityfocus.com/bid/101601
generic_textual HIGH https://web.archive.org/web/20210124113906/http://www.securityfocus.com/bid/101601
Reference id Reference type URL
https://access.redhat.com/errata/RHSA-2017:2904
https://access.redhat.com/errata/RHSA-2017:2905
https://access.redhat.com/errata/RHSA-2017:2906
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12159.json
https://api.first.org/data/v1/epss?cve=CVE-2017-12159
https://bugzilla.redhat.com/show_bug.cgi?id=1484111
https://github.com/keycloak/keycloak/commit/9b75b603e3a5f5ba6deff13cbb45b070bf2d2239
https://nvd.nist.gov/vuln/detail/CVE-2017-12159
https://web.archive.org/web/20210124113906/http://www.securityfocus.com/bid/101601
GHSA-7fmw-85qm-h22p https://github.com/advisories/GHSA-7fmw-85qm-h22p
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://access.redhat.com/errata/RHSA-2017:2904
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://access.redhat.com/errata/RHSA-2017:2905
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://access.redhat.com/errata/RHSA-2017:2906
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12159.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://bugzilla.redhat.com/show_bug.cgi?id=1484111
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2017-12159
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://web.archive.org/web/20210124113906/http://www.securityfocus.com/bid/101601
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.79968
EPSS Score 0.01452
Published At Aug. 9, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T07:58:48.582624+00:00 ProjectKB MSRImporter Import https://raw.githubusercontent.com/SAP/project-kb/master/MSR2019/dataset/vulas_db_msr2019_release.csv 37.0.0