CVE-2018-1791

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/148946 · VDB Entry
• ibm.com/support/docview.wss · Vendor Advisory

connections のその他の脆弱性

• CVE-2019-4403中 5.4IBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI …
• CVE-2018-1896中 5.4IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domai…
• CVE-2018-1935中 4.3IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM…
• CVE-2017-1748中 6.1IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a …
• CVE-2015-7461中 6.5XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated use…