Marketing Operations@9.0.0.4 Security Vulnerabilities and Issues — Marketing Operations@9.0.0.4 CVE List

Lucene search

IbmMarketing Operations9.0.0.4

3 matches found

CVE•added 2015/06/07 6:59 p.m.•35 views

CVE-2014-8887

IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, via unspecified vectors.

4CVSS6.4AI score0.00196EPSS

CVE•added 2015/06/07 6:59 p.m.•32 views

CVE-2014-6175

Cross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.2AI score0.0018EPSS

CVE•added 2015/06/07 6:59 p.m.•31 views

CVE-2014-6222

Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.

4CVSS6.2AI score0.00403EPSS