CVE-2017-11470: Idera Uptime Infrastructure Monitor

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.

Affected products

• Idera Uptime Infrastructure Monitor: version 7.8 only

Published 2017-07-20. Last modified 2026-06-17.