IBM Platform Symphony 7.1 Fix Pack 1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:platform_symphony:7.1:fp1:*:*:*:*:*:*
part: a version: 7.1 update: fp1
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Platform Symphony (e354ab77-5ec1-5907-81df-153e95d10824) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1708 |
vulnerable | 2026-06-08 05:11:18.615584 |
Details available
MEDIUM (6.5)
IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force ID: 146343.
Published: 2018-10-11T12:00:00.000Z
Updated: 2024-09-17T03:03:29.869Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1705 |
vulnerable | 2026-06-08 05:11:18.614681 |
Details available
MEDIUM (6.5)
IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 contain an information disclosure vulnerability that could allow an authenticated attacker to obtain highly sensitive information. IBM X-Force ID: 146340.
Published: 2018-08-28T11:00:00.000Z
Updated: 2024-09-16T16:17:42.804Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1704 |
vulnerable | 2026-06-08 05:11:18.613837 |
Details available
MEDIUM (6.8)
IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 146339.
Published: 2018-09-28T13:00:00.000Z
Updated: 2024-09-16T17:13:52.176Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1702 |
vulnerable | 2026-06-08 05:11:18.613164 |
Details available
HIGH (7.1)
IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 146189.
Published: 2018-09-28T13:00:00.000Z
Updated: 2024-09-16T23:46:49.215Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.