What’s Vulnerable › Vulnerabilities

CVE-2017-11470

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-07-20 · updated 2026-06-17
Weakness: CWE-89

Description

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.

Affected products

Idera Uptime Infrastructure Monitor: 7.8

References

Get alerted when CVE-2017-11470 or the next vulnerability affects your stack