What’s Vulnerable › Vulnerabilities

CVE-2017-9453

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-05 · updated 2026-06-17
• Weakness: CWE-863

Description

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass.

Affected products

• BMC Server Automation: through 8.9.01

References

• https://docs.bmc.com/docs/serverautomation/2002/notification-of-critical-security-issue-in-bmc-server-automation-cve-2017-9453-1020706453.html
• https://docs.bmc.com/docs/serverautomation/2002/notification-of-critical-security-issue-in-bmc-server-automation-cve-2017-9453-1020706453.html

Get alerted when CVE-2017-9453 or the next vulnerability affects your stack