7.5

CVE-2017-1210

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files made to look legitimate. IBM X-Force ID: 123850.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Daeja Viewone Version 4.1.5 SwEdition professional
Ibm ≫ Daeja Viewone Version 4.1.5 SwEdition standard
Ibm ≫ Daeja Viewone Version 4.1.5 SwEdition virtual
Ibm ≫ Daeja Viewone Version 4.1.5.1 SwEdition professional
Ibm ≫ Daeja Viewone Version 4.1.5.1 SwEdition standard
Ibm ≫ Daeja Viewone Version 4.1.5.1 SwEdition virtual
Ibm ≫ Daeja Viewone Version 5.0.0 SwEdition virtual
Ibm ≫ Daeja Viewone Version 5.0.2 SwEdition professional
Ibm ≫ Daeja Viewone Version 5.0.2 SwEdition standard
Ibm ≫ Daeja Viewone Version 5.0.2 SwEdition virtual
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.41% 0.691
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.ibm.com/support/docview.wss?uid=swg22008009
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/123850
Vendor Advisory
VDB Entry