CVE-2018-1935

Description

References

• securityfocus.com/bid/106134 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/153315 · VDB Entry
• ibm.com/support/docview.wss · Patch

connections의 다른 취약점

• CVE-2019-4403보통 5.4IBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI …
• CVE-2018-1896보통 5.4IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domai…
• CVE-2018-1791보통 4.9IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request proper…
• CVE-2017-1748보통 6.1IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a …
• CVE-2015-7461보통 6.5XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated use…