Ibm

Marketing Operations

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2020-4125

  • EPSS 0.13%
  • Veröffentlicht 20.07.2020 22:15:11
  • Zuletzt bearbeitet 21.11.2024 05:32:17

Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL environment by doing some modification in the link, giving the attacker access to confidential information.

4.3

CVE-2017-1119

  • EPSS 0.09%
  • Veröffentlicht 09.11.2018 01:29:00
  • Zuletzt bearbeitet 21.11.2024 03:21:21

IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information. An attacker could send a specially-crafted request to cause an error message to be returned containing the full root path. An attacker coul...

8.8

CVE-2016-6112

  • EPSS 0.35%
  • Veröffentlicht 22.05.2017 20:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over the web application. IBM X-Force ID: 118282.

4

CVE-2014-8887

  • EPSS 0.2%
  • Veröffentlicht 07.06.2015 18:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, v...

4

CVE-2014-6222

  • EPSS 0.4%
  • Veröffentlicht 07.06.2015 18:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to read arbitrary files via...

3.5

CVE-2014-6175

  • EPSS 0.18%
  • Veröffentlicht 07.06.2015 18:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to inject arbitrary ...