{"id":"CVE-2017-7352","aliases":["EUVD-2017-16379","GHSA-fqxh-27g4-6qvx"],"status":"published","title":"Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote...","description":"Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the \"host\" parameter on the 'System \u003e Configuration \u003e SNMP \u003e Add SNMP Trap Manager' screen.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00595,"percentile":0.4872,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2017-10-11T06:00:00Z","modified":"2026-06-17T01:24:10Z","products":[{"vendor":"purestorage","product":"purity"}],"references":[{"url":"http://arthrocyber.com/research#finding_3","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7352"},{"url":"https://github.com/advisories/GHSA-fqxh-27g4-6qvx"}],"sources":{"cve":[{"id":"CVE-2017-7352","description":"Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the \"host\" parameter on the 'System \u003e Configuration \u003e SNMP \u003e Add SNMP Trap Manager' screen.","status":"published","published":"2017-10-11T06:00:00Z","modified":"2024-08-05T15:56:36.466Z","updated_at":"2026-11-02T14:33:20.488433Z"}],"euvd":[{"id":"EUVD-2017-16379","description":"Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the \"host\" parameter on the 'System \u003e Configuration \u003e SNMP \u003e Add SNMP Trap Manager' screen.","status":"published","published":"2017-10-11T06:00:00Z","modified":"2024-08-05T15:56:36Z","updated_at":"2026-11-03T02:39:08.892902Z"}],"ghsa":[{"id":"GHSA-fqxh-27g4-6qvx","title":"Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote...","description":"Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the \"host\" parameter on the 'System \u003e Configuration \u003e SNMP \u003e Add SNMP Trap Manager' screen.","status":"published","published":"2022-05-13T01:30:22Z","modified":"2023-02-01T05:07:52Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:50:37.729708Z"}],"nvd":[{"id":"CVE-2017-7352","description":"Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the \"host\" parameter on the 'System \u003e Configuration \u003e SNMP \u003e Add SNMP Trap Manager' screen.","status":"published","published":"2017-10-11T06:29:00.19Z","modified":"2026-06-17T01:24:10.9Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:04:01.734197Z"}]}}