CVE-2017-0897
Severity CVSS v4.0:
Pending analysis
Type:
CWE-330
Use of Insufficiently Random Value
Publication date:
22/06/2017
Last modified:
20/04/2025
Description
ExpressionEngine version 2.x
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:expressionengine:expressionengine:2.0.0:public_beta:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.0.1:public_beta:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.0.2:public_beta:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.1.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.1.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.1.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.1.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.2.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.2.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.3.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.3.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:expressionengine:expressionengine:2.4.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://www.securityfocus.com/bid/99242
- https://docs.expressionengine.com/latest/about/changelog.html#version-3-5-5
- https://docs.expressionengine.com/v2/about/changelog.html#version-2-11-8
- https://expressionengine.com/blog/expressionengine-3.5.5-and-2.11.8-released
- https://hackerone.com/reports/215890
- http://www.securityfocus.com/bid/99242
- https://docs.expressionengine.com/latest/about/changelog.html#version-3-5-5
- https://docs.expressionengine.com/v2/about/changelog.html#version-2-11-8
- https://expressionengine.com/blog/expressionengine-3.5.5-and-2.11.8-released
- https://hackerone.com/reports/215890



