Lucene search

K
IbmConnections5.0

10 matches found

CVE
CVE
added 2018/06/04 5:29 p.m.51 views

CVE-2017-1748

IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious W...

6.8CVSS5.8AI score0.0013EPSS
CVE
CVE
added 2016/01/03 5:59 a.m.50 views

CVE-2015-5038

IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 does not properly detect recursion during XML entity expansion, which allows remote attackers to cause a denial of service (CPU consumption and application crash) via a crafted XML document containing a large...

7.8CVSS6.8AI score0.00893EPSS
CVE
CVE
added 2018/09/14 12:29 p.m.43 views

CVE-2018-1791

IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request property. By submitting suitable payloads, an attacker could exploit this vulnerability to induce the Connections server to attack other systems. IBM X-Force ID: 148...

4.9CVSS5AI score0.00166EPSS
CVE
CVE
added 2016/01/03 5:59 a.m.42 views

CVE-2015-5036

Cross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-5035.

5.4CVSS5AI score0.00168EPSS
CVE
CVE
added 2018/12/06 2:29 p.m.42 views

CVE-2018-1935

IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM X-Force ID: 153315.

4.3CVSS4.1AI score0.00172EPSS
CVE
CVE
added 2016/01/03 5:59 a.m.41 views

CVE-2015-5035

Cross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-5036.

5.4CVSS5AI score0.00168EPSS
CVE
CVE
added 2017/03/01 9:59 p.m.38 views

CVE-2016-5932

IBM Connections 4.0, 4.5, 5.0, and 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998294.

5.4CVSS5.2AI score0.00258EPSS
CVE
CVE
added 2016/01/03 5:59 a.m.35 views

CVE-2015-5037

Cross-site request forgery (CSRF) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

6.8CVSS5.4AI score0.00044EPSS
CVE
CVE
added 2018/12/07 4:29 p.m.34 views

CVE-2018-1896

IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456.

5.4CVSS5.5AI score0.00161EPSS
CVE
CVE
added 2018/02/14 3:29 p.m.32 views

CVE-2017-1682

IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134004...

5.4CVSS5.2AI score0.00198EPSS