IBM Storediq
8 CVEs affecting IBM Storediq. Latest disclosed: 2020-02-03. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-4165 | High | 7.5 | 2019-07-31 | IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow a remote attacker to cause a denial of service attack using repeated requests to the server. IBM X-Force ID… |
CVE-2018-1928 | Medium | 6.7 | 2018-11-30 | IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpo… |
CVE-2019-4167 | Medium | 6.5 | 2019-08-20 | IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a u… |
CVE-2018-1927 | Medium | 6.5 | 2018-11-30 | IBM StoredIQ 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a use… |
CVE-2019-4166 | Medium | 6.1 | 2019-04-30 | IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted… |
CVE-2020-4224 | Medium | 5.5 | 2020-02-03 | IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being encrypted when it cont… |
CVE-2018-1583 | Medium | 5.4 | 2018-05-22 | IBM StoredIQ 7.6 could allow an authenticated attacker to bypass certain security restrictions. By sending a specially-crafted request, an authenticated attack… |
CVE-2019-4163 | Medium | 4.3 | 2019-07-31 | IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow an authenticated user to obtain sensitive information that a privileged user should only be allowed to view… |