CVE-2017-17678

MediumCVSS 6.1

Published: 19/05/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

44th percentile - higher than 44% of all known CVEs

Summary

BMC Remedy Mid Tier 9.1SP3 is affected by a DOM-based cross-site scripting (XSS) vulnerability in a legacy utility. This allows an attacker to inject malicious client-side scripts.

Risk Assessment

An attacker could exploit this vulnerability to steal user sessions, intercept data, or perform unauthorized actions on behalf of the victim.

Recommendation

Immediately update BMC Remedy Mid Tier to a patched version or apply the available security fixes.

Original NVD description (English source)

BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripting (XSS). A DOM-based cross-site scripting vulnerability was discovered in a legacy utility.