CVE-2018-1896

概要

参考情報

• securityfocus.com/bid/106197 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/152456 · VDB Entry
• ibm.com/support/docview.wss · Patch

connections のその他の脆弱性

• CVE-2019-4403中 5.4IBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI …
• CVE-2018-1935中 4.3IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM…
• CVE-2018-1791中 4.9IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request proper…
• CVE-2017-1748中 6.1IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a …
• CVE-2015-7461中 6.5XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated use…