Forms Experience Builder (Ibm) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 18 known versions, newest CVE from 2018-04-12. Vendor: Ibm.

CVEs of Forms Experience Builder

• CVE-2014-6169 - CVSS 5.4 (medium), 2018-04-12: Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2016-0369 - CVSS 2.7 (low), 2018-02-21: XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information…
• CVE-2016-6001 - CVSS 3.1 (low), 2017-02-01: IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing for some information…
• CVE-2016-2884 - CVSS 8 (high), 2016-11-30: Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3.1, in an unspecified non-default configuration,…
• CVE-2016-0370 - CVSS 2.7 (low), 2016-09-01: Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary…