Ibm

Marketing Operations

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2020-4125

  • EPSS 0.13%
  • Published 20.07.2020 22:15:11
  • Last modified 21.11.2024 05:32:17

Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL environment by doing some modification in the link, giving the attacker access to confidential information.

4.3

CVE-2017-1119

  • EPSS 0.09%
  • Published 09.11.2018 01:29:00
  • Last modified 21.11.2024 03:21:21

IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information. An attacker could send a specially-crafted request to cause an error message to be returned containing the full root path. An attacker coul...

8.8

CVE-2016-6112

  • EPSS 0.35%
  • Published 22.05.2017 20:29:00
  • Last modified 20.04.2025 01:37:25

IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over the web application. IBM X-Force ID: 118282.

4

CVE-2014-8887

  • EPSS 0.2%
  • Published 07.06.2015 18:59:02
  • Last modified 12.04.2025 10:46:40

IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, v...

4

CVE-2014-6222

  • EPSS 0.4%
  • Published 07.06.2015 18:59:01
  • Last modified 12.04.2025 10:46:40

Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to read arbitrary files via...

3.5

CVE-2014-6175

  • EPSS 0.18%
  • Published 07.06.2015 18:59:00
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to inject arbitrary ...