{"id":"CVE-2017-11508","title":"SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans","summary":"SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by ent…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-89"],"vendor":"tenable","product":"security_center","affected":["security_center = 5.5.0","security_center = 5.5.1","security_center = 5.5.2"],"published":"2017-11-02","updated":"2026-08-17","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2017-11508","references":[{"url":"http://www.securitytracker.com/id/1039804","label":"vulnreport@tenable.com"},{"url":"https://www.tenable.com/security/tns-2017-13","label":"vulnreport@tenable.com"},{"url":"http://www.securitytracker.com/id/1039804","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2017-13","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.01031,"epssPercentile":0.61727,"ingestedAt":"2026-08-17T14:55:58.614Z","slug":"CVE-2017-11508","body":"## Overview\n\nSecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by entering a crafted SQL query into the password field of a diagnostic scan within SecurityCenter. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access.\n\n## Affected\n\n- `security_center = 5.5.0`\n- `security_center = 5.5.1`\n- `security_center = 5.5.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":48.4,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}