Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tealeaf_customer_experience:8.7:*:*:*:*:*:*:*

part: a version: 8.7 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTealeaf Customer Experience (7fb59f95-0efa-5970-83e9-322499a4bd23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1279 vulnerable 2026-06-08 05:09:21.572533 Details available
IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 124757.
Published: 2018-01-26T21:00:00.000Z
Updated: 2024-09-16T20:53:07.404Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1204 vulnerable 2026-06-08 05:09:21.376030 Details available
IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains hard-coded credentials. A remote attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 123740.
Published: 2018-01-26T21:00:00.000Z
Updated: 2024-09-17T03:23:42.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5978 vulnerable 2026-06-08 05:07:58.236831 Details available
Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-5975.
Published: 2016-09-26T01:00:00.000Z
Updated: 2024-08-06T01:15:10.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5968 vulnerable 2026-06-08 05:07:58.230227 Details available
The Replay Server in IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224 FP3 allows remote attackers to conduct SSRF attacks via unspecified vectors.
Published: 2016-11-25T03:38:00.000Z
Updated: 2024-08-06T01:15:10.913Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2983 vulnerable 2026-06-08 05:07:43.932726 Details available
IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker under unusual circumstances to read operational data or TLS session state for any active sessions, cause denial of service, or bypass security. IBM X-Force ID: 113999.
Published: 2018-01-26T21:00:00.000Z
Updated: 2024-09-17T01:01:43.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4990 vulnerable 2026-06-08 05:06:48.421929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4989 vulnerable 2026-06-08 05:06:48.421488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4988 vulnerable 2026-06-08 05:06:48.421009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4961 vulnerable 2026-06-08 05:06:48.271712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.