4.9
Medium
CVE-2018-1791 IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation…
Description
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request property. By submitting suitable payloads, an attacker could exploit this vulnerability to induce the Connections server to attack other systems. IBM X-Force ID: 148946.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Connections | 6.0 | No fix stated |
| Connections | 5.5 | No fix stated |
| Connections | 5.0 | No fix stated |
Other CVEs of Connections
The 9 CVEs of Connections →
CVE-2019-4403
IBM Connections 6.0 is vulnerable to cross-site scripting
5.4
Medium
CVE-2018-1896
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation…
4.6
Medium
CVE-2018-1935
IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request…
4.3
Medium
CVE-2017-1748
IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect…
6.8
Medium