Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:daeja_viewone:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDaeja Viewone (24cffe05-586a-534b-9891-827ee19df25d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4456 vulnerable 2026-06-08 05:13:57.213319 Details available
HIGH (7.1)
IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 163620.
Published: 2019-07-30T13:25:14.949Z
Updated: 2024-09-16T17:08:42.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4260 vulnerable 2026-06-08 05:13:57.015041 Details available
MEDIUM (5.3)
IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive information disclosure. IBM X-Force ID: 160012.
Published: 2019-07-02T15:05:23.258Z
Updated: 2024-09-17T02:16:42.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1835 vulnerable 2026-06-08 05:11:26.263491 Details available
HIGH (7.1)
IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150514.
Published: 2018-11-02T15:00:00.000Z
Updated: 2024-09-17T03:44:19.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1399 vulnerable 2026-06-08 05:11:18.001329 Details available
IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138435.
Published: 2018-02-27T17:00:00.000Z
Updated: 2024-09-16T23:35:28.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1308 vulnerable 2026-06-08 05:09:21.692890 Details available
IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462.
Published: 2017-07-13T15:00:00.000Z
Updated: 2024-09-17T01:11:35.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1212 vulnerable 2026-06-08 05:09:21.404226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1211 vulnerable 2026-06-08 05:09:21.403714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1210 vulnerable 2026-06-08 05:09:21.403144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1209 vulnerable 2026-06-08 05:09:21.397017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.