Daeja Viewone@5.0 Security Vulnerabilities and Issues — Daeja Viewone@5.0 CVE List

Lucene search

IbmDaeja Viewone5.0

4 matches found

CVE•added 2019/07/02 3:15 p.m.•76 views

CVE-2019-4260

IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive information disclosure. IBM X-Force ID: 160012.

5.3CVSS4.6AI score0.00163EPSS

CVE•added 2017/07/13 3:29 p.m.•37 views

CVE-2017-1308

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462.

6.5CVSS6.1AI score0.00285EPSS

CVE•added 2018/11/02 3:29 p.m.•33 views

CVE-2018-1835

IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150514.

7.1CVSS6.8AI score0.00286EPSS

CVE•added 2018/02/27 5:29 p.m.•28 views

CVE-2018-1399

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.1AI score0.00237EPSS