Security Siteprotector System (Ibm) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2022-07-11. Vendor: Ibm.
CVEs of Security Siteprotector System
- CVE-2020-4150 - CVSS 9.8 (critical), 2022-07-11: IBM SiteProtector Appliance 3.1.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,…
- CVE-2020-4138 - CVSS 5.5 (medium), 2022-07-11: IBM SiteProtector Appliance 3.1.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174049.
- CVE-2020-4146 - CVSS 5.3 (medium), 2021-11-12: IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker…
- CVE-2020-4140 - CVSS 5.4 (medium), 2021-11-12: IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
- CVE-2015-0172 - CVSS 7.5 (high), 2018-04-10: IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1 allows remote attackers to bypass intended security restrictions and consequently execute unspecified…
- CVE-2015-0162 - CVSS 7 (high), 2017-09-20: IBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges.
- CVE-2015-0171 - CVSS 5.5 (medium), 2015-05-25: Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote…
- CVE-2015-0170 - CVSS 2.1 (low), 2015-05-25: IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows local users to obtain sensitive information by…
- CVE-2015-0169 - CVSS 4 (medium), 2015-05-25: IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arguments via…
- CVE-2015-0168 - CVSS 3.5 (low), 2015-05-25: Cross-site scripting (XSS) vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote…
- CVE-2015-0161 - CVSS 6.5 (medium), 2015-05-25: SQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated…
- CVE-2015-0160 - CVSS 9 (critical), 2015-05-25: IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary…
