8.8
High
CVE-2018-1595 IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary…
Description
IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary commands due to improper handling of user supplied input. IBM X-Force ID: 143622.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Symphony | 7.2.0.2 | No fix stated |
| Spectrum Symphony | 7.1.2 | No fix stated |
Other CVEs of Spectrum Symphony
The 7 CVEs of Spectrum Symphony →
CVE-2023-24975
IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST…
5.4
Medium
CVE-2018-1706
IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting
5.4
Medium
CVE-2018-1708
IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as…
6.5
Medium
CVE-2018-1702
IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML…
7.1
High