Security Siteprotector System@3.1.1.1 Security Vulnerabilities and Issues — Security Siteprotector System@3.1.1.1 CVE List

Lucene search

IbmSecurity Siteprotector System3.1.1.1

6 matches found

CVE•added 2015/05/25 2:59 p.m.•38 views

CVE-2015-0160

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary commands with SYSTEM privileges via unspecified vectors.

9CVSS7.4AI score0.0101EPSS

CVE•added 2015/05/25 2:59 p.m.•33 views

CVE-2015-0168

Cross-site scripting (XSS) vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.2AI score0.00166EPSS

CVE•added 2015/05/25 2:59 p.m.•33 views

CVE-2015-0170

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows local users to obtain sensitive information by reading cached data.

2.1CVSS5.7AI score0.0005EPSS

CVE•added 2015/05/25 2:59 p.m.•33 views

CVE-2015-0171

Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors.

5.5CVSS6.3AI score0.0093EPSS

CVE•added 2015/05/25 2:59 p.m.•31 views

CVE-2015-0161

SQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

6.5CVSS7.9AI score0.00277EPSS

CVE•added 2015/05/25 2:59 p.m.•26 views

CVE-2015-0169

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arguments via unspecified vectors.

4CVSS6.1AI score0.0018EPSS