Spectrum Symphony (Ibm) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2023-03-10. Vendor: Ibm.
CVEs of Spectrum Symphony
- CVE-2023-24975 - CVSS 6.1 (medium), 2023-03-10: IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to…
- CVE-2018-1706 - CVSS 5.4 (medium), 2018-10-11: IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
- CVE-2018-1708 - CVSS 6.5 (medium), 2018-10-11: IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM…
- CVE-2018-1704 - CVSS 6.8 (medium), 2018-09-28: IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker to conduct phishing attacks, using an…
- CVE-2018-1702 - CVSS 7.1 (high), 2018-09-28: IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML External Entity Injection (XXE) attack when…
- CVE-2018-1705 - CVSS 6.5 (medium), 2018-08-28: IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 contain an information disclosure vulnerability that could allow an…
- CVE-2018-1595 - CVSS 8.8 (high), 2018-08-01: IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary commands due to improper handling of user…
