CVE-2016-2957

概要

参考情報

• www-01.ibm.com/support/docview.wss · Broken Link
• www-01.ibm.com/support/docview.wss · Patch
• securityfocus.com/bid/94300 · Third Party Advisory

connections のその他の脆弱性

• CVE-2019-4403中 5.4IBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI …
• CVE-2018-1896中 5.4IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domai…
• CVE-2018-1935中 4.3IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM…
• CVE-2018-1791中 4.9IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request proper…
• CVE-2017-1748中 6.1IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a …