Daeja Viewone

daeja_viewone

Vendor: Ibm • 10 CVEs

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-4246 1Ibm 1Daeja Viewone Nov 21, 2024 Oct 1, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in further attacks against the system. IBM X-Force ID: 159521.
CVE-2019-4456 1Ibm 1Daeja Viewone Nov 21, 2024 Jul 30, 2019 N/A· v4 7.1 HIGH· v3 5.5 MEDIUM· v2 IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sen...Show more IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 163620.Show less
CVE-2019-4260 1Ibm 1Daeja Viewone Nov 21, 2024 Jul 2, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive information disclosure. IBM X-Force ID: 160012.
CVE-2018-1835 1Ibm 1Daeja Viewone Nov 21, 2024 Nov 2, 2018 N/A· v4 7.1 HIGH· v3 5.5 MEDIUM· v2 IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive informat...Show more IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150514.Show less
CVE-2018-1399 1Ibm 1Daeja Viewone Nov 21, 2024 Feb 27, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended function...Show more IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138435.Show less
CVE-2017-1212 1Ibm 1Daeja Viewone May 13, 2026 Oct 24, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to a denial of service when viewing or opening a large file. IBM X-Force ID: 123852.
CVE-2017-1211 1Ibm 1Daeja Viewone May 13, 2026 Oct 24, 2017 N/A· v4 2.5 LOW· v3 1.9 LOW· v2 IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled. IBM X-Force ID: 123851.
CVE-2017-1210 1Ibm 1Daeja Viewone May 13, 2026 Oct 24, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files made to look legitimate. IBM X-Force ID: 123850.
CVE-2017-1209 1Ibm 1Daeja Viewone May 13, 2026 Oct 24, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended func...Show more IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123849.Show less
CVE-2017-1308 1Ibm 1Daeja Viewone May 13, 2026 Jul 13, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462.