CVE-2018-1791medium

CVE-2018-1791: medium-severity vulnerability in IBM Connections

Published · Updated

Follow this CVE+ Monitor Connections

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.9epss 1.0%
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request property. By submitting suitable payloads, an attacker could exploit this vulnerability to induce the Connections server to attack other systems. IBM X-Force ID: 148946.
CVSS:3.0/A:L/AC:H/AV:N/C:L/I:N/PR:L/S:C/UI:N/E:U/RC:C/RL:O
Affected products
IBM · Connections
Related CVEs — IBM Connections

In the same product, most dangerous first.

CVE-2017-1613—CVE-2017-1613EPSS 1.5%CVE-2018-1935MEDIUMCVE-2018-1935EPSS 1.3%CVE-2018-1896MEDIUMCVE-2018-1896EPSS 1.0%CVE-2017-1748MEDIUMCVE-2017-1748EPSS 0.7%CVE-2017-1683—CVE-2017-1683EPSS 0.7%CVE-2017-1498—CVE-2017-1498EPSS 0.7%