AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2017-15103

HIGH · CVSS 8.8 EPSS 5.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-12-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2017-15103
Severity
HIGH
CVSS
8.8
EPSS
5.50%

Original Filing — NVD Description

A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and possibly privilege escalation.