20 results (0.003 seconds)

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2014-4782

https://notcve.org/view.php?id=CVE-2014-4782

IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service. IBM X-Force ID: 95029. IBM InfoSphere BigInsights 2.1.2 permite que usuarios remotos autenticados descubran las credenciales del servidor SMTP mediante vectores relacionados con el servicio de gestión de alertas. IBM X-Force ID: 95029. • http://www-01.ibm.com/support/docview.wss?uid=swg21693053 https://exchange.xforce.ibmcloud.com/vulnerabilities/95029 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-1336

https://notcve.org/view.php?id=CVE-2017-1336

IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files. IBM X-Force ID: 126244. IBM Infosphere BigInsights 4.2.0 podría permitir que un atacante inyecte código que le podría dar acceso a datos y archivos restringidos. IBM X-Force ID: 126244. • http://www.ibm.com/support/docview.wss?uid=swg22010812 http://www.securityfocus.com/bid/102061 https://exchange.xforce.ibmcloud.com/vulnerabilities/126244 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-1552

https://notcve.org/view.php?id=CVE-2017-1552

IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 131396. IBM InfoSphere BigInsights en sus versiones 4.2.0 y 4.2.5 es vulnerable a inyección de enlaces. Al persuadir a una víctima para que haga clic en un enlace de URL especialmente manipulado, un atacante remoto podría explotar esta vulnerabilidad para llevar a cabo varios ataques contra el sistema, incluidos el Cross-Site Scripting (XSS), envenenamiento de caché o secuestro de sesión. • http://www.ibm.com/support/docview.wss?uid=swg22009192 http://www.securityfocus.com/bid/101588 https://exchange.xforce.ibmcloud.com/vulnerabilities/131396 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-1553

https://notcve.org/view.php?id=CVE-2017-1553

IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131397. IBM InfoSphere BigInsights en sus versiones 4.2.0 y 4.2.5 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. • http://www.ibm.com/support/docview.wss?uid=swg22009192 http://www.securityfocus.com/bid/101588 https://exchange.xforce.ibmcloud.com/vulnerabilities/131397 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-1554

https://notcve.org/view.php?id=CVE-2017-1554

IBM Infosphere BigInsights 4.2.0 and 4.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 131398. IBM InfoSphere BigInsights en sus versiones 4.2.0 y 4.2.5 podría permitir que un atacante remoto secuestre los clics de la víctima. Al persuadir a una víctima para que visite un sitio web malicioso, un atacante remoto podría explotar esta vulnerabilidad para secuestrar las acciones de clicado de la víctima y, probablemente, lanzar más ataques contra la víctima. • http://www.ibm.com/support/docview.wss?uid=swg22009192 http://www.securityfocus.com/bid/101588 https://exchange.xforce.ibmcloud.com/vulnerabilities/131398 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •