Vulnerability record · CVE-2017-16935 · published 24 November 2017

CVE-2017-16935: Ametys improper input validation vulnerability

Ametys · Ametys

Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended access restrictions via a direct request to /plugins/core-ui/servercomm/messages.xml, as demonstrated by changing the admin password by obtaining account details via a users/search.json request, and then modifying the account via an editUser request.

9.8 CVSS 3.0 Critical EPSS 7.7% · top 5.6% CWE-20 · Improper input validation

9.8CVSS 3.0 base score, v2 5.0

7.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Ametys Ametys

References

Link	Tags
https://blogs.securiteam.com/index.php/archives/3517	ExploitTechnical DescriptionThird Party Advisory
https://issues.ametys.org/browse/RUNTIME-2582	Issue TrackingVendor Advisory
https://blogs.securiteam.com/index.php/archives/3517	ExploitTechnical DescriptionThird Party Advisory
https://issues.ametys.org/browse/RUNTIME-2582	Issue TrackingVendor Advisory

Track CVE-2017-16935 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.3CVE-2024-30614Ametys error message information leak vulnerabilityAn issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via exposed resources to the error scope.EPSS 0.48%12 Apr 2024 5.3CVE-2022-26159Ametys vulnerabilityThe auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/a…EPSS 13%28 Feb 2022 5.1CVE-2022-50937Ametys cross-site scripting vulnerabilityAmetys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for external links. Attackers can inj…EPSS 0.31%13 Jan 2026 9.5CVE-2026-93952Arista velocloud orchestrator improper input validation vulnerabilityVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality an…KEVEPSS 0.90%22 Sep 2026 8.8CVE-2019-1068Microsoft SQL Server improper input validation remote code executionMicrosoft SQL Server mishandles processing of internal functions, allowing an authenticated remote attacker to execute code on the database server. T…KEVEPSS 58%analysed15 Jul 2019 5.9CVE-2025-68686FortiOS symbolic link patch bypass exposes sensitive informationFortiOS contains an information exposure flaw (CWE-200) that lets a remote unauthenticated attacker bypass the patch for the symbolic link persistenc…KEVEPSS 30%analysed10 Feb 2026 9.3CVE-2026-12569PTC Windchill PDMlink and FlexPLM deserialization RCEPTC Windchill PDMlink and FlexPLM contain a deserialization of untrusted data flaw (also classified as improper input validation) that allows remote …KEVEPSS 46%analysed18 Jun 2026 10.0CVE-2026-34910Ubiquiti UniFi OS input validation flaw allows command injectionUniFi OS devices contain an improper input validation vulnerability (CWE-20) that lets a network-reachable attacker inject and execute commands. It a…KEVEPSS 46%analysed22 May 2026

Source: NIST National Vulnerability Database (record CVE-2017-16935), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.