CVE-2017-14956: AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports

Q: How do I fix CVE-2017-14956?

unified security management: upgrade to newer than 5.4.2. Exact commands for each OS are on this page.

Q: Is CVE-2017-14956 being exploited?

CVE-2017-14956 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2017-14956 affect?

CVE-2017-14956 affects unified security management. Severity is medium (CVSS 5.7). AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/ossim/report/wizard_email.php" script. Besides offering an export via a local download, the script also offers the possi

Q: How urgent is CVE-2017-14956?

Priority 45/100. Public exploit reference

This month

MEDIUM 5.7UPGRADE

CVE-2017-14956 is a medium-severity flaw (CVSS 5.7) affecting unified security management. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/ossim/report/wizard_email.php" script. Besides offering an export via a local download, the script also offers the possibility to send out any report via email to a given address (either in PDF or XLS format). Since there is no anti-CSRF token protecting this functionality, it is vulnerable to Cross-Site Request Forgery attacks.

Why this priority

Public exploit reference

A fixed release or distro patch exists.

Risk facts

CVSS score	5.7 (Medium)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	Low
User interaction	Required
EPSS exploit chance	1.9% (top 21%)
CISA exploited list	No
Weakness	CWE-352
Published	2017-10-18
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: alienvault

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2017-10-18 18:29 UTCPublished CVE record published
2026-06-17 01:07 UTCUpdated Record last modified

alienvault unified security management UPGRADE

Affected: <= 5.4.2

Fixed in: newer than 5.4.2

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy unified-security-management || rpm -q unified-security-management || unified-security-management --version

2. UPGRADE to newer than 5.4.2 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade unified-security-management

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade unified-security-management

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Exploit-DB: AlienVault Unified Security Management (USM) 5.4.2 - Cross-Site Request Forgery

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2017-14956?

unified security management: upgrade to newer than 5.4.2. Exact commands for each OS are on this page.

Is CVE-2017-14956 being exploited?

CVE-2017-14956 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2017-14956 affect?

CVE-2017-14956 affects unified security management. Severity is medium (CVSS 5.7). AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/ossim/report/wizard_email.php" script. Besides offering an export via a local download, the script also offers the possi

How urgent is CVE-2017-14956?

Priority 45/100. Public exploit reference

Software pages

PHP vulnerabilities

Related CVEs

CVE-2018-7279 CRITICAL 9.8 UPGRADE UPGRADE A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
CVE-2017-6972 CRITICAL 9.8 UPGRADE UPGRADE AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessa
CVE-2017-6971 HIGH 8.8 UPGRADE UPGRADE AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbit
CVE-2017-6970 HIGH 8.4 UPGRADE UPGRADE AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands i
CVE-2016-8583 MEDIUM 6.1 UPGRADE UPGRADE Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulne

References

← Back to latest CVEs