CVE-2015-0115

CVE-2015-0115 is a CSRF vulnerability in IBM Leads affecting multiple versions (7.x; 8.1.0 before 8.1.0.14; 8.2; 8.5.0 before 8.5.0.7.3; 8.6.0 before 8.6.0.8.1; 9.0.0 through 9.0.0.4; 9.1.0 before 9.1.0.6.1; 9.1.1 before 9.1.1.0.2) that allows remote authenticated users to hijack the authenticati...

CVE-2015-0116

CVE-2015-0116 affects IBM Leads versions including 7.x, 8.1.0 up to 8.1.0.14, 8.2, 8.5.0 up to 8.5.0.7.3, 8.6.0 up to 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 up to 9.1.0.6.1, and 9.1.1 up to 9.1.1.0.2. The issue is a CSRF risk caused by improper restriction of link additions, enabling remote auth...

CVE-2015-0131

CVE-2015-0131 describes a Cross-site scripting (XSS) vulnerability in IBM Leads across multiple versions (7.x; 8.1.0 prior to 8.1.0.14; 8.2; 8.5.0 prior to 8.5.0.7.3; 8.6.0 prior to 8.6.0.8.1; 9.0.0 through 9.0.0.4; 9.1.0 prior to 9.1.0.6.1; 9.1.1 before 9.1.1.0.2) that allows remote authenticate...

CVE-2015-0127

CVE-2015-0127 affects IBM Leads (multiple versions: 7.x; 8.1.0 up to 8.1.0.14; 8.2; 8.5.0 up to 8.5.0.7.3; 8.6.0 up to 8.6.0.8.1; 9.0.0 up to 9.0.0.4; 9.1.0 up to 9.1.0.6.1; 9.1.1 up to 9.1.1.0.2). The root cause is improper restriction of FRAME elements, enabling remote authenticated users to co...

CVE-2015-0126

IBM Leads vulnerability CVE-2015-0126 affects IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2. It allows remote authenticated users to bypass intended file-upload restrictions via ...