4.9
Moyenne
CVE-2018-1791 IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation…
Description
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request property. By submitting suitable payloads, an attacker could exploit this vulnerability to induce the Connections server to attack other systems. IBM X-Force ID: 148946.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Connections | 6.0 | Pas de correctif indiqué |
| Connections | 5.5 | Pas de correctif indiqué |
| Connections | 5.0 | Pas de correctif indiqué |
Autres CVE de Connections
Les 9 CVE de Connections →
CVE-2019-4403
IBM Connections 6.0 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2018-1896
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation…
4.6
Moyenne
CVE-2018-1935
IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request…
4.3
Moyenne
CVE-2017-1748
IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect…
6.8
Moyenne