{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T06:09:34.266","vulnerabilities":[{"cve":{"id":"CVE-2017-11508","sourceIdentifier":"vulnreport@tenable.com","published":"2017-11-02T17:29:00.197","lastModified":"2026-06-17T01:01:54.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by entering a crafted SQL query into the password field of a diagnostic scan within SecurityCenter. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access."},{"lang":"es","value":"Las versiones 5.5.0, 5.5.1 y 5.5.2 de SecurityCenter contienen una vulnerabilidad de inyección SQL que podría explotarse por un usuario autenticado con los privilegios suficientes para ejecutar análisis de diagnóstico. Un atacante podría explotar esta vulnerabilidad introduciendo una consulta SQL manipulada en el campo password de un análisis de diagnóstico en SecurityCenter. La explotación exitosa de esta vulnerabilidad podría permitir que un atacante obtenga acceso no autorizado."}],"affected":[{"source":"vulnreport@tenable.com","affectedData":[{"vendor":"Tenable","product":"SecurityCenter","versions":[{"version":"5.5.0, 5.5.1 and 5.5.2","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:securitycenter:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF94F84-FB02-465F-AA4F-A731C2523843"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:securitycenter:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EED13C8B-C78F-44E3-80E8-0D168E57E981"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:securitycenter:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"83A4C5DB-D941-46BC-A845-32BFF2011F46"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1039804","source":"vulnreport@tenable.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.tenable.com/security/tns-2017-13","source":"vulnreport@tenable.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1039804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.tenable.com/security/tns-2017-13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}