IBM Connections 5.5.0.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*

part: a version: 5.5.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductConnections (40706cd4-5297-508b-aaa5-4ee20f7fa11d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1748 vulnerable 2026-06-08 05:09:22.982199 Details available
MEDIUM (6.8)
IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 135521.
Published: 2018-06-04T17:00:00.000Z
Updated: 2024-09-16T19:00:52.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1498 vulnerable 2026-06-08 05:09:22.459708 Details available
IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129020.
Published: 2017-12-07T15:00:00.000Z
Updated: 2024-09-16T17:37:54.912Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5932 vulnerable 2026-06-08 05:07:58.122512 Details available
IBM Connections 4.0, 4.5, 5.0, and 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998294.
Published: 2017-03-01T21:00:00.000Z
Updated: 2024-08-06T01:15:10.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3010 vulnerable 2026-06-08 05:07:44.013175 Details available
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-2997, and CVE-2016-3005.
Published: 2016-09-01T10:00:00.000Z
Updated: 2024-08-05T23:40:14.457Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3008 vulnerable 2026-06-08 05:07:44.012254 Details available
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956.
Published: 2016-09-01T10:00:00.000Z
Updated: 2024-08-05T23:40:14.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3007 vulnerable 2026-06-08 05:07:44.011843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3006 vulnerable 2026-06-08 05:07:44.011394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3005 vulnerable 2026-06-08 05:07:44.010918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3003 vulnerable 2026-06-08 05:07:44.010000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3001 vulnerable 2026-06-08 05:07:44.009032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3000 vulnerable 2026-06-08 05:07:44.008523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2998 vulnerable 2026-06-08 05:07:44.005772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2997 vulnerable 2026-06-08 05:07:44.005355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2995 vulnerable 2026-06-08 05:07:44.001984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2956 vulnerable 2026-06-08 05:07:43.845937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2955 vulnerable 2026-06-08 05:07:43.845608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2954 vulnerable 2026-06-08 05:07:43.845174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0322 vulnerable 2026-06-08 05:07:14.993692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0310 vulnerable 2026-06-08 05:07:14.961648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0308 vulnerable 2026-06-08 05:07:14.961261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0307 vulnerable 2026-06-08 05:07:14.960864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0305 vulnerable 2026-06-08 05:07:14.933202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.