What’s Vulnerable › Vulnerabilities

CVE-2017-11725

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-29 · updated 2026-06-17
• Weakness: CWE-601

Description

The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections.

Affected products

• Thycotic Secret Server: through 10.2.000018

References

• https://thycotic.com/products/secret-server/resources/advisories/thy-ss-009/
• https://thycotic.com/products/secret-server/resources/advisories/thy-ss-009/

Get alerted when CVE-2017-11725 or the next vulnerability affects your stack