CVE-2017-1114

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/121152 · VDB Entry
• ibm.com/support/docview.wss · Vendor Advisory

campaign のその他の脆弱性

• CVE-2018-1921中 5.4IBM Campaign 9.1.0, 9.1.2, 10.1, and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri…
• CVE-2019-4384中 4.3IBM Campaign 9.1.2 and 10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted …
• CVE-2018-1941高 7.8IBM Campaign 9.1.0 and 9.1.2 could allow a local user to obtain admini privileges due to the application not validating access permissions. …
• CVE-2016-9749低 3.3IBM Campaign 9.1.0, 9.1.2, 10.0, and 10.1 could allow an authenticated user with access to the local network to bypass security due to lack …
• CVE-2017-1115中 5.4IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, woul…