Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
DEBIAN-CVE-2017-16785
See a problem?
Please try reporting it
to the source
first.
Source
https://security-tracker.debian.org/tracker/DEBIAN-CVE-2017-16785
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2017-16785.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2017-16785
Upstream
CVE-2017-16785
Published
2017-11-10T23:29:00Z
Modified
2025-09-19T06:24:22Z
Summary
[none]
Details
Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php.
References
https://security-tracker.debian.org/tracker/CVE-2017-16785
Affected packages
Debian:11
/
cacti
Package
Name
cacti
Purl
pkg:deb/debian/cacti?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1.1.27+ds1-3
Ecosystem specific
{ "urgency": "not yet assigned" }
Debian:12
/
cacti
Package
Name
cacti
Purl
pkg:deb/debian/cacti?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1.1.27+ds1-3
Ecosystem specific
{ "urgency": "not yet assigned" }
Debian:13
/
cacti
Package
Name
cacti
Purl
pkg:deb/debian/cacti?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1.1.27+ds1-3
Ecosystem specific
{ "urgency": "not yet assigned" }
Debian:14
/
cacti
Package
Name
cacti
Purl
pkg:deb/debian/cacti?arch=source
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1.1.27+ds1-3
Ecosystem specific
{ "urgency": "not yet assigned" }
DEBIAN-CVE-2017-16785 - OSV