Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_siteprotector_system:3.1.1.0:*:*:*:*:*:*:*

part: a version: 3.1.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Siteprotector System (5187d884-ba11-5cf9-8eb6-e1bebcff997c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4146 vulnerable 2026-06-08 05:25:58.951716 Details available
MEDIUM (4)
IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 174129.
Published: 2021-11-12T15:20:20.714Z
Updated: 2024-09-16T22:01:31.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4140 vulnerable 2026-06-08 05:25:58.951259 Details available
MEDIUM (5.4)
IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174052.
Published: 2021-11-12T15:20:19.203Z
Updated: 2024-09-17T01:41:58.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0172 vulnerable 2026-06-08 05:06:13.837228 Details available
IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1 allows remote attackers to bypass intended security restrictions and consequently execute unspecified commands and obtain sensitive information via unknown vectors. IBM X-Force ID: 100927.
Published: 2018-04-10T15:00:00.000Z
Updated: 2024-08-06T04:03:09.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0171 vulnerable 2026-06-08 05:06:13.836891 Details available
Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors.
Published: 2015-05-25T14:00:00.000Z
Updated: 2024-08-06T04:03:10.538Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0170 vulnerable 2026-06-08 05:06:13.836390 Details available
IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows local users to obtain sensitive information by reading cached data.
Published: 2015-05-25T14:00:00.000Z
Updated: 2024-08-06T04:03:09.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0169 vulnerable 2026-06-08 05:06:13.835890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0168 vulnerable 2026-06-08 05:06:13.835359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0162 vulnerable 2026-06-08 05:06:13.831901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0161 vulnerable 2026-06-08 05:06:13.831416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0160 vulnerable 2026-06-08 05:06:13.830333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.