Platform Symphony (Ibm) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2018-10-11. Vendor: Ibm.
CVEs of Platform Symphony
- CVE-2018-1708 - CVSS 6.5 (medium), 2018-10-11: IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM…
- CVE-2018-1704 - CVSS 6.8 (medium), 2018-09-28: IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker to conduct phishing attacks, using an…
- CVE-2018-1702 - CVSS 7.1 (high), 2018-09-28: IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML External Entity Injection (XXE) attack when…
- CVE-2018-1705 - CVSS 6.5 (medium), 2018-08-28: IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 contain an information disclosure vulnerability that could allow an…
- CVE-2018-1595 - CVSS 8.8 (high), 2018-08-01: IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary commands due to improper handling of user…
- CVE-2013-5400 - CVSS 10 (critical), 2014-02-14: An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to…
- CVE-2013-6305 - CVSS 4.3 (medium), 2014-01-21: IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers'…
- CVE-2013-5387 - CVSS 4.3 (medium), 2013-11-06: Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service (process crash or hang) via a malformed SOAP…
