VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jul 31, 2017· Updated Jun 17, 2026

CVE-2017-11727

CVE-2017-11727

Description

services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon field) on victims who click on a crafted link, aka XSS.

Affected products

2
  • Connectwise/Manage2 versions
    cpe:2.3:a:connectwise:manage:2017.5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:connectwise:manage:2017.5:*:*:*:*:*:*:*
    • (no CPE)range: 2017.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.