Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:campaign:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCampaign (b639d6ae-9d29-5f0c-a55b-caab7e31a5f5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4384 vulnerable 2026-06-08 05:13:57.109207 Details available
MEDIUM (4.3)
IBM Campaign 9.1.2 and 10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162172.
Published: 2019-06-19T13:30:19.794Z
Updated: 2024-09-17T01:31:41.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1941 vulnerable 2026-06-08 05:11:26.437258 Details available
HIGH (8.4)
IBM Campaign 9.1.0 and 9.1.2 could allow a local user to obtain admini privileges due to the application not validating access permissions. IBM X-Force ID: 153382.
Published: 2018-12-05T17:00:00.000Z
Updated: 2024-09-16T16:32:32.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1921 vulnerable 2026-06-08 05:11:26.388097 Details available
MEDIUM (5.4)
IBM Campaign 9.1.0, 9.1.2, 10.1, and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152857.
Published: 2019-07-17T14:05:20.754Z
Updated: 2024-09-16T19:40:47.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1116 vulnerable 2026-06-08 05:09:12.981195 Details available
IBM Campaign 8.6, 9.0, 9.1, 9.1.1, 9.1.2, and 10.0 contains excessive details on the client side which could provide information useful for an authenticated user to conduct other attacks. IBM X-Force ID: 121154.
Published: 2018-04-27T15:00:00.000Z
Updated: 2024-09-17T01:51:17.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1115 vulnerable 2026-06-08 05:09:12.980774 Details available
MEDIUM (5.4)
IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 121153.
Published: 2018-09-07T16:00:00.000Z
Updated: 2024-09-16T17:38:48.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1114 vulnerable 2026-06-08 05:09:12.977948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9749 vulnerable 2026-06-08 05:08:24.461285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.