IBM Connections vulnerabilities

CVEs per yearBy the year they were published

1. 20173
2. 20185
3. 20191

Newest CVEs

• CVE-2019-4403

  IBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the…

  IBM · Connections

  Medium5.4
• CVE-2018-1896

  IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID:…

  IBM · Connections

  Medium4.6
• CVE-2018-1935

  IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM X-Force ID: 153315.

  IBM · Connections

  Medium4.3
• CVE-2018-1791

  IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request property. By submitting…

  IBM · Connections

  Medium4.9
• CVE-2017-1748

  IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a…

  IBM · Connections

  Medium6.8
• CVE-2017-1682

  IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…

  IBM · Connections

  Medium5.4
• CVE-2017-1683

  IBM Connections Engagement Center 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…

  IBM · Connections

  Medium5.4
• CVE-2017-1613

  IBM Connections 6.0 could allow an unauthenticated remote attacker to gain unauthenticated or unauthorized access to non-sensitive Engagement Center template…

  IBM · Connections

  Medium5.3
• CVE-2017-1498

  IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the…

  IBM · Connections

  Medium5.4