FE
Product
Forms Experience Builder
5
CVEs
0
On KEV
8.0
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 3
Watch
Add Forms Experience Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2884 | 8.0 | Nov 30 | Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3.1, in an unspecified non-default configuration, allows remote… Affected: 8.5.0.0; 8.5.1.0; 8.5.1.1; 8.6.0.0; 8.6.1; 8.6.1.1; +3 more |
| CVE-2014-6169 | 5.4 | Apr 12 | Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: 8.5; 8.5.1 |
| CVE-2016-6001 | 3.1 | Feb 1 | IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing for some information disclosure of… Affected: 8.5; 8.5.1; 8.6.0 |
| CVE-2016-0369 | 2.7 | Feb 21 | XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data Affected: 8.5; 8.5.1; 8.6.0 |
| CVE-2016-0370 | 2.7 | Sep 1 | Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via… Affected: 8.5.0.0; 8.5.1.0; 8.5.1.1; 8.6.0.0; 8.6.1; 8.6.1.1; +2 more |
Showing 5
