Show filters
30 Total Results
Displaying 11-20 of 30
Sort by:
Attacker Value
Unknown
CVE-2016-2957
Disclosure Date: November 30, 2016 (last updated November 25, 2024)
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading a stack trace in a response.
0
Attacker Value
Unknown
CVE-2016-3009
Disclosure Date: November 30, 2016 (last updated November 25, 2024)
Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the Connections generic page.
0
Attacker Value
Unknown
CVE-2016-2958
Disclosure Date: November 30, 2016 (last updated November 25, 2024)
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading an "archaic" e-mail address in a response.
0
Attacker Value
Unknown
CVE-2016-3002
Disclosure Date: November 30, 2016 (last updated November 25, 2024)
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client device.
0
Attacker Value
Unknown
CVE-2016-3004
Disclosure Date: November 30, 2016 (last updated November 25, 2024)
Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the set of available applications.
0
Attacker Value
Unknown
CVE-2016-2953
Disclosure Date: November 30, 2016 (last updated November 25, 2024)
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.
0
Attacker Value
Unknown
CVE-2016-3007
Disclosure Date: September 26, 2016 (last updated November 25, 2024)
Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users.
0
Attacker Value
Unknown
CVE-2016-3000
Disclosure Date: September 26, 2016 (last updated November 25, 2024)
The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service (service degradation) via a crafted URL.
0
Attacker Value
Unknown
CVE-2016-3003
Disclosure Date: September 26, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3001 and CVE-2016-3006.
0
Attacker Value
Unknown
CVE-2016-3006
Disclosure Date: September 26, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3001 and CVE-2016-3003.
0
