Daeja Viewone (Ibm) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 44 known versions, newest CVE from 2019-10-01. Vendor: Ibm.
CVEs of Daeja Viewone
- CVE-2019-4246 - CVSS 5.3 (medium), 2019-10-01: IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in further attacks against the system. IBM…
- CVE-2019-4456 - CVSS 7.1 (high), 2019-07-30: IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A…
- CVE-2019-4260 - CVSS 5.3 (medium), 2019-07-02: IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive…
- CVE-2018-1835 - CVSS 7.1 (high), 2018-11-02: IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker…
- CVE-2018-1399 - CVSS 5.4 (medium), 2018-02-27: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
- CVE-2017-1209 - CVSS 5.4 (medium), 2017-10-24: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
- CVE-2017-1212 - CVSS 6.5 (medium), 2017-10-24: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to a denial of service when viewing or opening a large file. IBM X-Force…
- CVE-2017-1211 - CVSS 2.5 (low), 2017-10-24: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled. IBM X-Force…
- CVE-2017-1210 - CVSS 7.5 (high), 2017-10-24: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files made to look…
- CVE-2017-1308 - CVSS 6.5 (medium), 2017-07-13: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due…
