CVE-2017-13754

Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu...

5.4 MediumPublic exploit

Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the "server name" field in actions/ChangeConfiguration.html.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

3.88%Down 5.3 points since Apr 14, 2021

What each source reports

NVD Score used 5.4

Record: CVE-2017-13754
CVSS 3.0: 5.4 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0: 3.5 LowAV:N/AC:M/Au:S/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2017-13754
Updated: 2026-11-02

EUVDEUVD-2017-5271 No score

Record: EUVD-2017-5271
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c78m-h25c-7vj6 5.4

Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu...

Record: GHSA-c78m-h25c-7vj6
CVSS 3.0: 5.4 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weakness: CWE-79
Updated: 2026-11-02

Affected products

wibu codemeter

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	CodeMeter 6.50 - Cross-Site Scripting	2017-09-04

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-13754 is a medium vulnerability (CVSS 5.4) in Wibu Codemeter, published September 7, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.88%, the 90th percentile. No source names a fixed version.