VULNERABILITY REMEDIATIONCVE remediation guides
Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.
These defensive guides do not provide exploit reproduction or bypass instructions. 01Confirm exposure first
Match the product, version, installation path, and external exposure before treating a score as an action order.
02Prefer supported fixes
Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.
03Verify and retain rollback
Confirm version state, service health, access paths, logs, and rollback readiness after the change.
18,947 guide candidatesPage 1553 of 1579
Known exploitedHighResearch in progress
CVE-2017-6740Cisco IOS and IOS XE Software
- Affected
- 12.2(14)ZA, 12.2(14)ZA3, 12.2(14)ZA2, 12.2(14)ZA5, 12.2(14)ZA4, 12.2(14)ZA6, 12.2(14)ZA7, 12.2(25)SE2, 12.2(29)SV2, 12.2(17d)SXB6, 12.2(17d)SXB11, 12.2(17d)SXB7, 12.2(17d)SXB4, 12.2(17d)SXB2, 12.2(17d)SXB3, 12.2(17d)SXB5, 12.2(17d)SXB10, 12.2(17d)SXB8, 12.2(17d)SXB11a, 12.2(17d)SXB1
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2017-6739Cisco IOS and IOS XE Software
- Affected
- >= 12.0 <= 12.4, >= 15.0 <= 15.6, >= 2.2.0 <= 3.17.0
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2017-6738Cisco IOS and IOS XE Software
- Affected
- 12.2(53)SE1, 12.2(55)SE, 12.2(50)SE2, 12.2(50)SE1, 12.2(50)SE5, 12.2(53)SE, 12.2(55)SE3, 12.2(55)SE2, 12.2(52)SE, 12.2(58)SE, 12.2(50)SE3, 12.2(55)SE1, 12.2(53)SE2, 12.2(52)SE1, 12.2(54)SE, 12.2(50)SE4, 12.2(50)SE, 12.2(58)SE1, 12.2(55)SE4, 12.2(58)SE2
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2017-6737Cisco IOS and IOS XE Software
- Affected
- 12.1(3)XI, 12.2(4)B, 12.2(15)B, 12.2(16)B1, 12.2(4)B7, 12.2(4)B2, 12.2(16)B2, 12.2(4)B6, 12.2(4)B1, 12.2(4)B4, 12.2(4)B3, 12.2(4)B8, 12.2(4)B5, 12.2(16)B, 12.2(2)XA, 12.2(2)XA2, 12.2(2)XA3, 12.2(2)XA4, 12.2(2)XA5, 12.2(2)XA1
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2017-6736Cisco IOS and IOS XE Software
- Affected
- 12.1(3a)XI9, 12.1(3)XI, 12.1(3a)XI8, 12.1(3a)XI3, 12.1(3a)XI1, 12.1(3a)XI7, 12.1(3a)XI6, 12.1(3a)XI4, 12.1(3a)XI2, 12.1(3a)XI5, 12.0(5)S, 12.0(11)S6, 12.0(10)S, 12.0(11)S5, 12.0(2)S, 12.0(4)S, 12.0(6)S2, 12.0(7)S, 12.0(6)S, 12.0(6)S1
- Fixed
- No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2017-8570Microsoft Office
- Affected
- Microsoft Office, 2007, 2010, 2013, 2016
- Fixed
- No verified fixed-version field is available yet
Known exploitedCriticalResearch in progress
CVE-2017-9791Apache Struts 1
- Affected
- 2.1.x series, 2.3.x series, 2.3.1, 2.3.1.1, 2.3.1.2, 2.3.3, 2.3.4, 2.3.4.1, 2.3.7, 2.3.8, 2.3.12, 2.3.14, 2.3.14.1, 2.3.14.2, 2.3.14.3, 2.3.15, 2.3.15.1, 2.3.15.2, 2.3.15.3, 2.3.16
- Fixed
- No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2017-11113ncurses
- Affected
- 6.0
- Fixed
- No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2017-11112ncurses
- Affected
- 6.0
- Fixed
- No verified fixed-version field is available yet
Known exploitedCriticalFixed-version data
CVE-2017-9248Progress ASP.NET AJAX and Sitefinity
- Affected
- < 10.0.6412.0, <= 2017.2.503
- Fixed
- 10.0.6412.0
Review reviewCriticalResearch in progress
CVE-2017-10685ncurses
- Affected
- 6.0
- Fixed
- No verified fixed-version field is available yet
Review reviewCriticalResearch in progress
CVE-2017-10684ncurses
- Affected
- 6.0
- Fixed
- No verified fixed-version field is available yet