Ibm Connections Luki w zabezpieczeniach

Oś czasu

Wersja

5.0	29
5.5	26
5.0 CR3	25
5.1	19
5.2	19

Przeciwdziałanie

Official Fix	42
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	19

Wykorzystywanie

High	3
Functional	0
Proof-of-Concept	5
Unproven	3
Not Defined	50

Wektor dostępu

Not Defined	0
Physical	1
Local	1
Adjacent	0
Network	59

Uwierzytelnianie

Not Defined	0
High	0
Low	38
None	23

Interakcja z użytkownikiem

Not Defined	0
Required	35
None	26

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	3
≤5	27
≤6	21
≤7	4
≤8	2
≤9	2
≤10	1

CVSSv3 Temp

≤1	0
≤2	1
≤3	0
≤4	4
≤5	28
≤6	19
≤7	5
≤8	2
≤9	2
≤10	0

VulDB

≤1	0
≤2	0
≤3	1
≤4	11
≤5	19
≤6	18
≤7	4
≤8	5
≤9	2
≤10	1

NVD

≤1	0
≤2	0
≤3	1
≤4	3
≤5	8
≤6	27
≤7	3
≤8	1
≤9	1
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	3
≤6	1
≤7	1
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	1
<2k	0
<5k	8
<10k	33
<25k	16
<50k	3
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	44
<2k	5
<5k	7
<10k	5
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (32): 1, 1.0.1, 1.0.2, 2, 2.0.1, 2.0.1.1, 2.5, 2.5.0.1, 2.5.0.2, 2.5.0.3, 3, 3.0, 3.0.1, 3.0.1.1, 4.0, 4.0 CR4, 4.1, 4.2, 4.3, 4.4, 4.5, 4.5 CR4, 4.5 CR5, 5.0, 5.0 CR3, 5.0 CR4, 5.1, 5.2, 5.3, 5.4, 5.5, 6.0

Link to Product Website: https://www.ibm.com/

Typ oprogramowania: Groupware Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2019-06-14	4.8	4.8	IBM Connections Web UI cross site scripting	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2019-4403
2018-12-07	5.5	5.5	IBM Connections Host Header privilege escalation	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2018-1896
2018-12-06	4.3	4.3	IBM Connections Error Message information disclosure	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2018-1935
2018-09-14	5.3	5.3	IBM Connections privilege escalation	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.07	CVE-2018-1791
2018-06-04	6.7	6.7	IBM Connections Redirect	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2017-1748
2018-03-20	5.4	5.1	IBM Connections XML Data XML External Entity	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2015-7461
2018-03-20	4.8	4.6	IBM Connections cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2015-7460
2018-03-20	4.8	4.6	IBM Connections cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2015-7459
2018-03-20	4.8	4.6	IBM Connections cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2015-7458
2018-02-14	4.4	4.4	IBM Connections Web UI cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2017-1682