Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*

part: a version: 5.0.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductConnections (40706cd4-5297-508b-aaa5-4ee20f7fa11d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1748 vulnerable 2026-06-08 05:09:22.982146 Details available
MEDIUM (6.8)
IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 135521.
Published: 2018-06-04T17:00:00.000Z
Updated: 2024-09-16T19:00:52.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3010 vulnerable 2026-06-08 05:07:44.013157 Details available
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-2997, and CVE-2016-3005.
Published: 2016-09-01T10:00:00.000Z
Updated: 2024-08-05T23:40:14.457Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3009 vulnerable 2026-06-08 05:07:44.012705 Details available
Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the Connections generic page.
Published: 2016-11-30T11:00:00.000Z
Updated: 2024-08-05T23:40:14.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3008 vulnerable 2026-06-08 05:07:44.012232 Details available
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956.
Published: 2016-09-01T10:00:00.000Z
Updated: 2024-08-05T23:40:14.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3007 vulnerable 2026-06-08 05:07:44.011826 Details available
Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users.
Published: 2016-09-26T01:00:00.000Z
Updated: 2024-08-05T23:40:14.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3006 vulnerable 2026-06-08 05:07:44.011378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3005 vulnerable 2026-06-08 05:07:44.010900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3004 vulnerable 2026-06-08 05:07:44.010446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3003 vulnerable 2026-06-08 05:07:44.009983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3002 vulnerable 2026-06-08 05:07:44.009489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3001 vulnerable 2026-06-08 05:07:44.009015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3000 vulnerable 2026-06-08 05:07:44.008506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2998 vulnerable 2026-06-08 05:07:44.005754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2997 vulnerable 2026-06-08 05:07:44.005337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2995 vulnerable 2026-06-08 05:07:44.001967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2958 vulnerable 2026-06-08 05:07:43.846685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2957 vulnerable 2026-06-08 05:07:43.846303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2956 vulnerable 2026-06-08 05:07:43.845916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2955 vulnerable 2026-06-08 05:07:43.845585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2954 vulnerable 2026-06-08 05:07:43.844239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2953 vulnerable 2026-06-08 05:07:43.843820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0322 vulnerable 2026-06-08 05:07:14.993673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0310 vulnerable 2026-06-08 05:07:14.961630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0308 vulnerable 2026-06-08 05:07:14.961245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0307 vulnerable 2026-06-08 05:07:14.960846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0305 vulnerable 2026-06-08 05:07:14.932680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7461 vulnerable 2026-06-08 05:07:01.098766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7460 vulnerable 2026-06-08 05:07:01.098385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7459 vulnerable 2026-06-08 05:07:01.098011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7458 vulnerable 2026-06-08 05:07:01.097532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.