CVE-2019-4456: Improper Restriction of XML External Entity Reference

IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 163620...

CVE-2019-4260: Undefined Security Weakness

IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive information disclosure. IBM X-Force ID: 160012...

PT-2018-14416

Name of the Vulnerable Software and Affected Versions IBM Daeja ViewONE Professional, Standard & Virtual version 5 Description The issue allows a remote attacker to expose sensitive information or consume memory resources through a XML External Entity Injection XXE attack when processing XML data...

CVE-2018-1835: Improper Restriction of XML External Entity Reference

IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150514...

PT-2018-12262

Name of the Vulnerable Software and Affected Versions IBM Daeja ViewONE Professional, Standard & Virtual versions 4.1.5 and 5.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosur...

CVE-2018-1399: Improper Neutralization of Input During Web Page Generation

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

PT-2017-12350

Name of the Vulnerable Software and Affected Versions IBM Daeja ViewONE Professional, Standard & Virtual versions 4.1.5.1 and 5.0.2 Description The issue allows an unauthenticated attacker to inject data into log files, making them appear legitimate. Recommendations For version 4.1.5.1, at the...

PT-2017-12347

Name of the Vulnerable Software and Affected Versions IBM Daeja ViewONE Professional, Standard & Virtual versions 4.1.5.1 and 5.0.2 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

PT-2017-12355

Name of the Vulnerable Software and Affected Versions IBM Daeja ViewONE Professional, Standard & Virtual versions 4.1.5.1 and 5.0.2 Description The issue allows for a denial of service when viewing or opening a large file. Recommendations For version 4.1.5.1, update to a version that fixes this...

PT-2017-12352

Name of the Vulnerable Software and Affected Versions IBM Daeja ViewONE Professional, Standard & Virtual versions 4.1.5.1 and 5.0.2 Description The issue could disclose sensitive information to a local user when logging is enabled. Recommendations For versions 4.1.5.1 and 5.0.2, consider disablin...

CVE-2017-1209: Improper Neutralization of Input During Web Page Generation

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2017-1211: Exposure of Sensitive Information to an Unauthorized Actor

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled. IBM X-Force ID: 123851...

CVE-2017-1210: Improper Input Validation

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files made to look legitimate. IBM X-Force ID: 123850...

CVE-2017-1212: Undefined Security Weakness

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to a denial of service when viewing or opening a large file. IBM X-Force ID: 123852...

CVE-2017-1308: Files or Directories Accessible to External Parties

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462...