GCVE - cpe:2.3:a:ibm_corporation:connections:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm_corporation:connections:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ibm Corporation (`d12a6641-f3f1-52ca-aee3-0e264bbe9c89`)
Product	Connections (`594ae3e7-a4e4-5e65-ab23-5bc8423a6541`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-5932`	vulnerable	2026-06-08 05:07:58.120435	Details available IBM Connections 4.0, 4.5, 5.0, and 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998294. Published: 2017-03-01T21:00:00.000Z Updated: 2024-08-06T01:15:10.786Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96453 http://www.ibm.com/support/docview.wss?uid=swg21998294	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0310`	vulnerable	2026-06-08 05:07:14.961558	Details available IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. Published: 2017-02-08T22:00:00.000Z Updated: 2024-08-05T22:15:23.387Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg21988338 http://www.securityfocus.com/bid/92437	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0308`	vulnerable	2026-06-08 05:07:14.961175	Details available IBM Connections 5.5 and earlier is vulnerable to possible link manipulation attack that could result in the display of inappropriate background images. Published: 2017-02-08T22:00:00.000Z Updated: 2024-08-05T22:15:23.180Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg21986770 http://www.securityfocus.com/bid/92439	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0307`	vulnerable	2026-06-08 05:07:14.960762	Details available IBM Connections 5.5 and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned responses. Published: 2017-02-08T22:00:00.000Z Updated: 2024-08-05T22:15:23.349Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/92440 http://www.ibm.com/support/docview.wss?uid=swg21986770	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0305`	vulnerable	2026-06-08 05:07:14.930988	Details available IBM Connections is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Published: 2017-02-08T22:00:00.000Z Updated: 2024-08-05T22:15:23.310Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg21986770 http://www.securityfocus.com/bid/92436	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.