|
253431
|
3.3 |
LOW
Local
|
ibm
|
cognos_business_intelligence_server
|
IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340.
|
CWE-200
Information Exposure
|
CVE-2017-1125
|
2024-11-21 12:21 |
2017-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253432
|
6.1 |
MEDIUM
Network
|
ibm
|
inotes
|
IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lea…
|
CWE-79
Cross-site Scripting
|
CVE-2017-1325
|
2024-11-21 12:21 |
2017-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253433
|
5.3 |
MEDIUM
Network
|
ibm
|
maximo_asset_management maximo_asset_management_essentials
|
IBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive information that could be used in further attacks against the system. IBM X-Force ID: 125153.
|
CWE-200
Information Exposure
|
CVE-2017-1292
|
2024-11-21 12:21 |
2017-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253434
|
5.4 |
MEDIUM
Network
|
ibm
|
maximo_asset_management maximo_asset_management_essentials
|
IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return …
|
CWE-79
Cross-site Scripting
|
CVE-2017-1291
|
2024-11-21 12:21 |
2017-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253435
|
5.4 |
MEDIUM
Network
|
ibm
|
tivoli_federated_identity_manager
|
IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functional…
|
CWE-79
Cross-site Scripting
|
CVE-2017-1320
|
2024-11-21 12:21 |
2017-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253436
|
8.2 |
HIGH
Network
|
ibm
|
sdk
|
IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive inform…
|
CWE-611
XXE
|
CVE-2017-1289
|
2024-11-21 12:21 |
2017-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253437
|
5.4 |
MEDIUM
Network
|
ibm
|
content_navigator
|
IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionali…
|
CWE-79
Cross-site Scripting
|
CVE-2017-1282
|
2024-11-21 12:21 |
2017-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253438
|
9.8 |
CRITICAL
Network
|
ibm
|
informix_open_admin_tool
|
IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. IBM X-Force ID: 120390.
|
NVD-CWE-noinfo
|
CVE-2017-1092
|
2024-11-21 12:21 |
2017-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253439
|
5.4 |
MEDIUM
Network
|
ibm
|
business_process_manager
|
IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remo…
|
CWE-601
Open Redirect
|
CVE-2017-1159
|
2024-11-21 12:21 |
2017-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253440
|
8.1 |
HIGH
Network
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access …
|
NVD-CWE-noinfo
|
CVE-2017-1137
|
2024-11-21 12:21 |
2017-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|