Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tealeaf_customer_experience:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTealeaf Customer Experience (7fb59f95-0efa-5970-83e9-322499a4bd23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1279 vulnerable 2026-06-08 05:09:21.572502 Details available
IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 124757.
Published: 2018-01-26T21:00:00.000Z
Updated: 2024-09-16T20:53:07.404Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1204 vulnerable 2026-06-08 05:09:21.375411 Details available
IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains hard-coded credentials. A remote attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 123740.
Published: 2018-01-26T21:00:00.000Z
Updated: 2024-09-17T03:23:42.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5997 vulnerable 2026-06-08 05:07:58.478783 Details available
The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not apply password-quality rules to password changes, which makes it easier for remote attackers to obtain access via a brute-force attack.
Published: 2016-09-26T01:00:00.000Z
Updated: 2024-08-06T01:15:10.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5996 vulnerable 2026-06-08 05:07:58.478330 Details available
The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not enforce password-length restrictions, which makes it easier for remote attackers to obtain access via a brute-force attack.
Published: 2016-09-26T01:00:00.000Z
Updated: 2024-08-06T01:15:10.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5977 vulnerable 2026-06-08 05:07:58.236403 Details available
Open redirect vulnerability in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Published: 2016-09-26T01:00:00.000Z
Updated: 2024-08-06T01:15:10.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5976 vulnerable 2026-06-08 05:07:58.235979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5975 vulnerable 2026-06-08 05:07:58.235546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5968 vulnerable 2026-06-08 05:07:58.229649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2983 vulnerable 2026-06-08 05:07:43.932132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4990 vulnerable 2026-06-08 05:06:48.421909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4989 vulnerable 2026-06-08 05:06:48.421467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4988 vulnerable 2026-06-08 05:06:48.420983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4987 vulnerable 2026-06-08 05:06:48.420650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4961 vulnerable 2026-06-08 05:06:48.271112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.