CVE-2016-5978

IBM Tealeaf Customer Experience Web UI is affected by an XSS vulnerability (CVE-2016-5978) in the IBM Tealeaf portal. The issue allows remote authenticated users to inject arbitrary JavaScript/HTML via an embedded string in the Web UI. Affected software ranges include Tealeaf CX versions before 8...

CVE-2016-5977

CVE-2016-5977 is an open redirect vulnerability in IBM Tealeaf Customer Experience web portal. The issue affects multiple versions: 8.7.1.8847 FP10 and 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224 FP...

CVE-2015-4989

CVE-2015-4989 is an information-disclosure vulnerability in IBM Tealeaf Customer Experience portals. The IBM advisory and related IBM Tealeaf bulletins confirm that the issue affects IBM Tealeaf CX products from versions 8.0 through 9.0.2 (including 9.0.2A and earlier 9.x releases) and allows an ...

CVE-2015-4961

CVE-2015-4961 affects IBM Tealeaf Customer Experience up to certain builds where internal server connections (Data Service, Search Service, Replay Service, Tracking Service) use unencrypted HTTP. This creates network-sniffing risk for sensitive data on multi-server deployments. Affected versions:...

CVE-2015-4990

IBM Tealeaf Customer Experience CVE-2015-4990 affects the portal in versions 8.0–9.0.2, where a local privileged user could obtain authentication credentials from the portal by leveraging privileges during an unspecified connection type. The IBM security bulletin summarizes the vulnerability and ...

CVE-2016-2983

CVE-2016-2983 affects IBM Tealeaf Customer Experience on versions 8.7, 8.8 and 9.0.2, where a remote attacker could, under unusual circumstances, read operational data or TLS session state for active sessions, cause denial of service, or bypass security. The issue is described in IBM and NVD reco...

CVE-2017-1204

CVE-2017-1204 affects IBM Tealeaf Customer Experience versions 8.7, 8.8 and 9.0.2, where hard-coded credentials allow remote authentication and system access. This vulnerability is described in IBM Security Bulletins and is reflected in NVD data with CVSS v3.0 vector CVSS:3.0/AV:N/AC:H/PR:N/UI:N/...

CVE-2015-4988

CVE-2015-4988 affects IBM Tealeaf Customer Experience replay server. A directory traversal vulnerability in affected 8.x/9.x releases enables remote attackers to read arbitrary files on Windows Server hosting the replay server. IBM lists multiple remedial versions (up to 9.0.2A/9.0.2 and correspo...

CVE-2016-5968

CVE-2016-5968 affects IBM Tealeaf Customer Experience Replay Server: SSRF vulnerability allowing remote proxies to forward HTTP requests to internal/external resources. Affected product versions include Replay Server 8.x (before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9), 9.0.0/9.0.1 before 9....

CVE-2015-4987

The CVE-2015-4987 entry describes an authentication bypass in IBM Tealeaf Customer Experience search and replay servers (versions 8.0–9.0.2). An unauthenticated remote attacker could bypass security and access certain product functionality and data. NVD data lists CVSS v2 base score 6.4 (MEDIUM) ...

CVE-2016-5976

CVE-2016-5976 affects IBM Tealeaf Customer Experience web portal (versions 8.0–9.0.2). The vulnerability allows remote authenticated users to discover component passwords via unspecified vectors. Exploitation details are not provided beyond password disclosure risk. IBM’s advisory lists multiple ...

CVE-2017-1279

CVE-2017-1279 affects IBM Tealeaf Customer Experience versions 8.7, 8.8 and 9.0.2. The vulnerability enables an unauthenticated remote attacker to traverse directories by sending a specially crafted URL containing "/.." sequences to view arbitrary files on the system. Exploitation details indicat...

CVE-2016-5996

CVE-2016-5996 affects IBM Tealeaf Customer Experience web portal and is caused by not enforcing minimum password-length restrictions, enabling brute-force access attempts via remote authentication. Affected versions include 8.0–9.0.2 (with specific FP/Patch levels listed by IBM), notably 8.7.1.88...

CVE-2016-5997

Summary of CVE-2016-5997 (IBM Tealeaf CX portal): The web portal in IBM Tealeaf Customer Experience versions prior to certain FP levels does not apply password-quality rules to password changes, making remote brute-force access easier. Affected products include IBM Tealeaf CX portals before 8.7.1...

CVE-2016-5975

CVE-2016-5975 (IBM Tealeaf CX Web UI XSS) is an authenticated-XSS vulnerability in the IBM Tealeaf Customer Experience web portal. The IBM Security Bulletin details that this affects Web UI earlier releases, including 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0/9.0.1 before 9.0.1.1117 FP5, ...