6.5
Medium
CVE-2018-1708 IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as…
Description
IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force ID: 146343.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Symphony | 7.2.0.2 | No fix stated |
| Spectrum Symphony | 7.1.2 | No fix stated |
Other CVEs of Spectrum Symphony
The 7 CVEs of Spectrum Symphony →
CVE-2023-24975
IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST…
5.4
Medium
CVE-2018-1706
IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting
5.4
Medium
CVE-2018-1702
IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML…
7.1
High
CVE-2018-1704
IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker…
6.8
Medium