AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-17947

MEDIUM · CVSS 4.8 EPSS 0.50% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-01-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2017-17947
Severity
MEDIUM
CVSS
4.8
EPSS
0.50%

Original NVD Description

A cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect Secure (PCS) before 8.0R17.0, 8.1.x before 8.1R13, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 and Pulse Policy Secure (PPS) before 5.2R10, 5.3.x before 5.3R9, and 5.4.x before 5.4R3 due to one of the URL parameters not being sanitized. Exploitation does require the user to be logged in as administrator; the issue is not applicable to the end user portal.