Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tealeaf_customer_experience:9.0.1:*:*:*:*:*:*:*

part: a version: 9.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTealeaf Customer Experience (7fb59f95-0efa-5970-83e9-322499a4bd23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-5997 vulnerable 2026-06-08 05:07:58.478839 Details available
The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not apply password-quality rules to password changes, which makes it easier for remote attackers to obtain access via a brute-force attack.
Published: 2016-09-26T01:00:00.000Z
Updated: 2024-08-06T01:15:10.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5996 vulnerable 2026-06-08 05:07:58.478393 Details available
The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not enforce password-length restrictions, which makes it easier for remote attackers to obtain access via a brute-force attack.
Published: 2016-09-26T01:00:00.000Z
Updated: 2024-08-06T01:15:10.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5978 vulnerable 2026-06-08 05:07:58.236905 Details available
Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-5975.
Published: 2016-09-26T01:00:00.000Z
Updated: 2024-08-06T01:15:10.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5977 vulnerable 2026-06-08 05:07:58.236462 Details available
Open redirect vulnerability in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Published: 2016-09-26T01:00:00.000Z
Updated: 2024-08-06T01:15:10.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5976 vulnerable 2026-06-08 05:07:58.236036 Details available
The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to discover component passwords via unspecified vectors.
Published: 2016-09-26T01:00:00.000Z
Updated: 2024-08-06T01:15:10.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5975 vulnerable 2026-06-08 05:07:58.235604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5968 vulnerable 2026-06-08 05:07:58.232266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4990 vulnerable 2026-06-08 05:06:48.421995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4989 vulnerable 2026-06-08 05:06:48.421560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4988 vulnerable 2026-06-08 05:06:48.421088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4961 vulnerable 2026-06-08 05:06:48.273700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.