Skip to content

Known vulnerabilities in IBM Connections

Is your version affected?

CVE Summary Score Published
CVE-2019-4403 IBM Connections 6.0 is vulnerable to cross-site scripting 5.4 Medium Jun 14, 2019
CVE-2018-1896 IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation… 4.6 Medium Dec 7, 2018
CVE-2018-1935 IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request… 4.3 Medium Dec 6, 2018
CVE-2018-1791 IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation… 4.9 Medium Sep 14, 2018
CVE-2017-1748 IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect… 6.8 Medium Jun 4, 2018
CVE-2017-1682 IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting Not rated Feb 14, 2018
CVE-2017-1683 IBM Connections Engagement Center 6.0 is vulnerable to cross-site scripting Not rated Dec 11, 2017
CVE-2017-1613 IBM Connections 6.0 could allow an unauthenticated remote attacker to gain unauthenticated or unauthorized access to… Not rated Dec 11, 2017
CVE-2017-1498 IBM Connections 5.5 is vulnerable to cross-site scripting Not rated Dec 7, 2017

Other IBM products