CVE-2017-15687: Logitech Media Server

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI.

Affected products

• Logitech Media Server: version 7.7.1 only; version 7.7.2 only; version 7.7.3 only; version 7.7.5 only; version 7.7.6 only; version 7.9.0 only; …

Published 2017-10-23. Last modified 2026-06-17.