FE
Product
Forms Experience Builder
by Ibm · last CVE Apr 12, 2018
5
CVEs
0
On KEV
8.0
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 3
Watch

Add Forms Experience Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-2884
8.0
0%
Nov 30
Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3.1, in an unspecified non-default configuration, allows remote…
Affected: 8.5.0.0; 8.5.1.0; 8.5.1.1; 8.6.0.0; 8.6.1; 8.6.1.1; +3 more
CVE-2014-6169
5.4
1%
Apr 12
Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: 8.5; 8.5.1
CVE-2016-6001
3.1
1%
Feb 1
IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing for some information disclosure of…
Affected: 8.5; 8.5.1; 8.6.0
CVE-2016-0369
2.7
1%
Feb 21
XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data
Affected: 8.5; 8.5.1; 8.6.0
CVE-2016-0370
2.7
1%
Sep 1
Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via…
Affected: 8.5.0.0; 8.5.1.0; 8.5.1.1; 8.6.0.0; 8.6.1; 8.6.1.1; +2 more
Showing 5