GCVE - cpe:2.3:a:ibm:marketing_platform:9.1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:marketing_platform:9.1.2:*:*:*:*:*:*:*

part: a version: 9.1.2 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Marketing Platform (`704986a1-74d1-5b58-be62-a57c5dc59d6e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-1920`	vulnerable	2026-06-08 05:11:26.386459	Details available HIGH (7.1) IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 152855. Published: 2018-12-07T16:00:00.000Z Updated: 2024-09-16T20:22:54.229Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/106201 https://exchange.xforce.ibmcloud.com/vulnerabilities/152855 http://www.ibm.com/support/docview.wss?uid=ibm10744217	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1424`	vulnerable	2026-06-08 05:11:18.141811	Details available HIGH (7.1) IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 139029. Published: 2018-12-07T16:00:00.000Z Updated: 2024-09-16T16:13:08.628Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/139029 http://www.securityfocus.com/bid/106201 http://www.ibm.com/support/docview.wss?uid=ibm10744217	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1107`	vulnerable	2026-06-08 05:09:12.964098	Details available MEDIUM (4.3) IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated attacker in further attacks against the system. IBM X-Force ID: 120906. Published: 2019-06-19T13:30:19.654Z Updated: 2024-09-17T03:03:10.975Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=ibm10887815 https://exchange.xforce.ibmcloud.com/vulnerabilities/120906 http://www.securityfocus.com/bid/108918	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0255`	vulnerable	2026-06-08 05:07:14.664462	Details available IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 110564. Published: 2017-05-05T19:00:00.000Z Updated: 2024-08-05T22:15:23.190Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/98336 http://www.ibm.com/support/docview.wss?uid=swg22001950	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.