CVE-2017-1092 in the critical feed json
IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows ser…
published 2017-05-22 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-10108
- cvss
- 9.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 75.8%
- EPSS 75.8% chance of exploitation in 30 days, percentile 99.5%
- public exploits
- 3
- Metasploit, Exploit-DB
Summary
IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. IBM X-Force ID: 120390.
Patch / fix
Timeline
- Published
- First public exploit (Metasploit exploit/multi/http/ibm_openadmin_tool_soap_welcomeserver_exec)
Exploit prediction
75.77% chance of exploitation in the next 30 days, higher than 99.5% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit exploit/multi/http/ibm_openadmin_tool_soap_welcomeserver_exec IBM OpenAdmin Tool SOAP welcomeServer PHP Code Execution metasploit exploit, excellent rank, 2017-05-30
- EDB-42541 IBM OpenAdmin Tool - SOAP welcomeServer PHP Code Execution (Metasploit) remote, 2017-08-22
- EDB-42091 IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Heap Buffer Overflow webapps, 2017-05-30
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- IBM Corporation Informix Servers
References
-
ibm.com
/support/docview.wss?uid=swg22002897
patch, vendor-advisory
-
exploit-db.com
/exploits/42541/
exploit
-
exploit-db.com
/exploits/42091/
exploit
Sources
- CVE List CVE-2017-1092
- NVD CVE-2017-1092
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.