← All advisories

Critical severity9.8NVD Advisory· Published Aug 1, 2017· Updated Jun 17, 2026

CVE-2017-12065

CVE-2017-12065

Description

spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Cacti (software)/Cacti2 versions
cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*range: <=1.1.15
- (no CPE)range: <1.1.16
osv-coords
pkg:rpm/opensuse/cacti&distro=openSUSE%20Tumbleweed
Range: < 1.2.18-1.2

Patches

Vulnerability mechanics

References

5

github.com/Cacti/cacti/commit/bd0e586f6f46d814930226f1516a194e7e72293envdIssue TrackingPatchThird Party Advisory
github.com/Cacti/cacti/issues/877nvdIssue TrackingPatchThird Party Advisory
cacti.net/release_notes.phpnvdRelease NotesVendor Advisory
www.securityfocus.com/bid/100080nvd
security.gentoo.org/glsa/201711-10nvd

News mentions

0

No linked articles in our index yet.