ST
Product
Storediq
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 6Low 0
Watch
Add Storediq to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4167 | 6.5 | Aug 20 | IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website… Affected: 7.6.0.0 through 7.6.0.18 |
| CVE-2019-4166 | 6.1 | Apr 30 | IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 7.6.0.0 through 7.6.0.18 |
| CVE-2020-4224 | 5.5 | Feb 3 | IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links Affected: 7.6.0.17 through 7.6.0.20 |
| CVE-2018-1928 | 5.5 | Nov 30 | IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpoints of high… Affected: 7.6.0.0 before 7.6.0.17 |
| CVE-2018-1583 | 5.4 | May 22 | IBM StoredIQ 7.6 could allow an authenticated attacker to bypass certain security restrictions Affected: 7.6.0 |
| CVE-2019-4163 | 4.3 | Jul 31 | IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow an authenticated user to obtain sensitive information that a privileged user should only be allowed to view. IBM X-Force ID:… Affected: 7.6.0.0 through 7.6.0.18 |
Showing 6