CVE-2018-1424

概要

参考情報

• ibm.com/support/docview.wss · Vendor Advisory
• securityfocus.com/bid/106201 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/139029 · VDB Entry

marketing platform のその他の脆弱性

• CVE-2017-1107中 4.3IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated atta…
• CVE-2018-1920高 7.1IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remot…
• CVE-2016-6112高 8.8IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and …
• CVE-2016-0255中 6.1IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input. A re…
• CVE-2016-0228中 5.4IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various s…