Login Request a demo
MP
Product
Marketing Platform
by Ibm · last CVE Jun 19, 2019
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 1High 4Medium 4Low 0
Severity
All severities13Critical1High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Marketing Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-0224
9.8
1%
Jun 28
SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors
Affected: 8.5.0.0; 8.5.0.1; 8.5.0.2; 8.5.0.3; 8.5.0.4; 8.5.0.5; +34 more
CVE-2016-6112
8.8
1%
May 22
IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over…
Affected: 8.6.0.0; 9.0.0.0; 9.1.0.0; 9.1.2.0; 10.0
CVE-2016-0233
8.8
1%
Jun 28
SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified…
Affected: 8.5.0.0; 8.5.0.1; 8.5.0.2; 8.5.0.3; 8.5.0.4; 8.5.0.5; +34 more
CVE-2018-1920
7.1
2%
Dec 7
IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data
Affected: 9.1.0; 9.1.2; 10.1
CVE-2018-1424
7.1
2%
Dec 7
IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data
Affected: 9.1.0; 9.1.2; 10.1
CVE-2016-0255
6.1
1%
May 5
IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input
Affected: 9.1; 9.1.1; 9.1.2; 10.0
CVE-2016-0229
6.1
1%
Jun 28
Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL
Affected: 8.6.0.0; 8.6.0.1; 8.6.0.2; 8.6.0.3; 8.6.0.4; 8.6.0.5; +28 more
CVE-2016-0228
5.4
1%
Apr 17
IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts
Affected: 10.0
CVE-2017-1107
4.3
1%
Jun 19
IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated attacker in further attacks against the…
Affected: 9.1.0.0; 9.1.2; 10.0; 10.1
CVE-2013-6311
–
1%
Jun 28
SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors
Affected: 9.1.0.0; 9.1.0.1
CVE-2013-6310
–
1%
Jun 28
Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors
Affected: 9.1.0.0; 9.1.0.1
CVE-2013-6309
–
1%
Jun 28
IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequently read records, modify records, or conduct transactions, via an…
Affected: 9.1.0.0; 9.1.0.1
CVE-2013-6308
–
1%
Jun 28
IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login credentials via an unspecified injection
Affected: 9.1.0.0; 9.1.0.1
Showing 13