Show filters
11 Total Results
Displaying 1-10 of 11
Sort by:
Attacker Value
Unknown
CVE-2017-1107
Disclosure Date: June 19, 2019 (last updated November 27, 2024)
IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated attacker in further attacks against the system. IBM X-Force ID: 120906.
0
Attacker Value
Unknown
CVE-2018-1920
Disclosure Date: December 07, 2018 (last updated November 27, 2024)
IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 152855.
0
Attacker Value
Unknown
CVE-2018-1424
Disclosure Date: December 07, 2018 (last updated November 27, 2024)
IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 139029.
0
Attacker Value
Unknown
CVE-2016-6112
Disclosure Date: May 22, 2017 (last updated November 26, 2024)
IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over the web application. IBM X-Force ID: 118282.
0
Attacker Value
Unknown
CVE-2016-0233
Disclosure Date: June 28, 2016 (last updated November 25, 2024)
SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2016-0229
Disclosure Date: June 28, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
0
Attacker Value
Unknown
CVE-2016-0224
Disclosure Date: June 28, 2016 (last updated November 25, 2024)
SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-6310
Disclosure Date: June 28, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-6308
Disclosure Date: June 28, 2014 (last updated October 05, 2023)
IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login credentials via an unspecified injection.
0
Attacker Value
Unknown
CVE-2013-6311
Disclosure Date: June 28, 2014 (last updated October 05, 2023)
SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
0
