Security Siteprotector System Security Vulnerabilities and Issues — Security Siteprotector System CVE List

Lucene search

IbmSecurity Siteprotector System

12 matches found

CVE•added 2022/07/11 5:15 p.m.•45 views

CVE-2020-4150

IBM SiteProtector Appliance 3.1.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174142.

9.8CVSS8.8AI score0.00058EPSS

CVE•added 2015/05/25 2:59 p.m.•38 views

CVE-2015-0160

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary commands with SYSTEM privileges via unspecified vectors.

9CVSS7.4AI score0.0101EPSS

CVE•added 2017/09/20 6:29 p.m.•33 views

CVE-2015-0162

IBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges.

7CVSS6.8AI score0.00051EPSS

CVE•added 2015/05/25 2:59 p.m.•33 views

CVE-2015-0168

Cross-site scripting (XSS) vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.2AI score0.00166EPSS

CVE•added 2015/05/25 2:59 p.m.•33 views

CVE-2015-0170

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows local users to obtain sensitive information by reading cached data.

2.1CVSS5.7AI score0.0005EPSS

CVE•added 2015/05/25 2:59 p.m.•33 views

CVE-2015-0171

Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors.

5.5CVSS6.3AI score0.0093EPSS

CVE•added 2022/07/11 5:15 p.m.•32 views

CVE-2020-4138

IBM SiteProtector Appliance 3.1.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174049.

5.5CVSS4.8AI score0.00044EPSS

CVE•added 2015/05/25 2:59 p.m.•31 views

CVE-2015-0161

SQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

6.5CVSS7.9AI score0.00277EPSS

CVE•added 2021/11/12 4:15 p.m.•28 views

CVE-2020-4146

IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 174129.

5.3CVSS5AI score0.00138EPSS

CVE•added 2015/05/25 2:59 p.m.•26 views

CVE-2015-0169

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arguments via unspecified vectors.

4CVSS6.1AI score0.0018EPSS

CVE•added 2018/04/10 3:29 p.m.•25 views

CVE-2015-0172

IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1 allows remote attackers to bypass intended security restrictions and consequently execute unspecified commands and obtain sensitive information via unknown vectors. IBM X-Force ID: 100927.

7.5CVSS7.4AI score0.00198EPSS

CVE•added 2021/11/12 4:15 p.m.•25 views

CVE-2020-4140

IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174052.

5.4CVSS5.1AI score0.00346EPSS