Ibm Rational Publishing Engine vulnerabilities

7 vulnerabilities

Known vulnerabilities in Ibm Rational Publishing Engine, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2018-1533ibmengineering_lifecycle_optimization_-_publishing+1
EPSS score
0.66%
IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142431.5.4CVE-2018-1657ibmengineering_lifecycle_optimization_-_publishing+1
EPSS score
0.97%
IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 144883.5.4CVE-2018-1534ibmengineering_lifecycle_optimization_-_publishing+1
EPSS score
0.66%
IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142432.5.4CVE-2018-1951ibmengineering_lifecycle_optimization_-_publishing+1
EPSS score
0.97%
IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153494.4.7CVE-2020-4316ibmengineering_lifecycle_optimization_-_publishing+1
EPSS score
1.17%
IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 177354.6.7CVE-2017-1787ibmengineering_lifecycle_optimization_-_publishing+1
EPSS score
0.35%
IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to obtain hard coded user credentials. IBM X-Force ID: 137022.5.4CVE-2019-4431ibmengineering_lifecycle_optimization_-_publishing+1
EPSS score
0.56%
IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162888.