PS
Product
Platform Symphony
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add Platform Symphony to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1595 | 8.8 | Aug 1 | IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary commands due to improper handling of user supplied input Affected: 6.1.1; 7.1.0; 7.1.1 |
| CVE-2018-1702 | 7.1 | Sep 28 | IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data Affected: 7.1; 7.1.1 |
| CVE-2018-1708 | 6.5 | Oct 11 | IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI Affected: 7.1; 7.1.1 |
| CVE-2018-1705 | 6.5 | Aug 28 | IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 contain an information disclosure vulnerability that could allow an authenticated… Affected: 7.1; 7.1.1 |
| CVE-2018-1704 | 5.4 | Sep 28 | IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 7.1; 7.1.1 |
| CVE-2013-5400 | – | Feb 14 | An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass… Affected: 5.2; 6.1.0; 6.1.1 |
| CVE-2013-6305 | – | Jan 21 | IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it… Affected: 5.2; 6.1.0.1 |
| CVE-2013-5387 | – | Nov 6 | Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service (process crash or hang) via a malformed SOAP request with a large… Affected: 5.2; 6.1; 6.1.1 |
Showing 8