Is CVE-2017-7427 actively exploited?

No active exploitation of CVE-2017-7427 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2017-7427 be exploited remotely?

Yes. CVE-2017-7427 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2017-7427?

CVE-2017-7427 has a CVSS score of 5.4 (MEDIUM).

HOME VULNERABILITIESCVE-2017-7427

MEDIUM

CVE-2017-7427

CWE-79Published: March 5, 2018· Updated: Jun 17, 2026

5.4

CVSS v3.1

Official Description

Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector, via vdtData in the Version discovery and via nextFrame in the Object Inspector and via Host GUID in the System details plugins.

NVD Source

Technical Analysis

CVE-2017-7427 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

From a weakness classification perspective (CWE-79): Cross-site scripting (XSS) vulnerabilities allow attackers to inject malicious scripts into web pages viewed by other users.