CO
Product
Connections
5
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 0
Watch
Add Connections to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5932 | 5.4 | Mar 1 | IBM Connections 4.0, 4.5, 5.0, and 5.5 is vulnerable to cross-site scripting Affected: 4.5; 3.0; 3.0.1; 3.0.1.1; 4.0; 5.0; +1 more |
| CVE-2016-0305 | 5.4 | Feb 8 | IBM Connections is vulnerable to cross-site scripting, caused by improper validation of user-supplied input Affected: 4.5; 3.0; 3.0.1; 3.0.1.1; 4.0; 5.0; +1 more |
| CVE-2016-0310 | 5.4 | Feb 8 | IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain Affected: 4.5; 3.0; 3.0.1; 3.0.1.1; 4.0; 5.0; +1 more |
| CVE-2016-0307 | 4.3 | Feb 8 | IBM Connections 5.5 and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned responses Affected: 4.5; 3.0; 3.0.1; 3.0.1.1; 4.0; 5.0; +1 more |
| CVE-2016-0308 | 4.3 | Feb 8 | IBM Connections 5.5 and earlier is vulnerable to possible link manipulation attack that could result in the display of inappropriate background images Affected: 4.5; 3.0; 3.0.1; 3.0.1.1; 4.0; 5.0; +1 more |
Showing 5