|
252431
|
7.5 |
HIGH
Network
|
ibm
|
i
|
IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of connectivity. IBM X-Force ID: 128379.
|
CWE-20
Improper Input Validation
|
CVE-2017-1460
|
2024-11-21 12:21 |
2017-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252432
|
5.9 |
MEDIUM
Network
|
ibm
|
api_connect api_management
|
IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID…
|
CWE-521
Weak Password Requirements
|
CVE-2017-1386
|
2024-11-21 12:21 |
2017-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252433
|
4.9 |
MEDIUM
Network
|
ibm
|
jazz_reporting_service
|
IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X…
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2017-1370
|
2024-11-21 12:21 |
2017-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252434
|
6.1 |
MEDIUM
Network
|
ibm
|
inotes
|
IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lea…
|
CWE-79
Cross-site Scripting
|
CVE-2017-1332
|
2024-11-21 12:21 |
2017-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252435
|
6.1 |
MEDIUM
Network
|
ibm
|
websphere_portal
|
IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alteri…
|
CWE-79
Cross-site Scripting
|
CVE-2017-1303
|
2024-11-21 12:21 |
2017-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252436
|
7.5 |
HIGH
Network
|
ibm
|
bigfix_platform
|
IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force ID: 123906.
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2017-1227
|
2024-11-21 12:21 |
2017-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252437
|
7.1 |
HIGH
Local
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker c…
|
CWE-276
Incorrect Default Permissions
|
CVE-2017-1382
|
2024-11-21 12:21 |
2017-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252438
|
5.4 |
MEDIUM
Network
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the inten…
|
CWE-79
Cross-site Scripting
|
CVE-2017-1380
|
2024-11-21 12:21 |
2017-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252439
|
5.4 |
MEDIUM
Network
|
ibm
|
rhapsody_design_manager
|
IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker c…
|
CWE-601
Open Redirect
|
CVE-2017-1287
|
2024-11-21 12:21 |
2017-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252440
|
5.4 |
MEDIUM
Network
|
ibm
|
rhapsody_design_manager
|
IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall…
|
CWE-79
Cross-site Scripting
|
CVE-2017-1249
|
2024-11-21 12:21 |
2017-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|