Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
connections vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2010-2280
Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x prior to 2.5.0.2 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "mobile edit actions," aka SPR ASR...
Ibm Lotus Connections 2.5.0
Ibm Lotus Connections 2.5.0.1
NA
CVE-2010-2279
The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x prior to 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.
Ibm Lotus Connections 2.5.0
Ibm Lotus Connections 2.5.0.1
6.5
CVSSv3
CVE-2016-2999
IBM Connections 4.x up to and including 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to obtain sensitive information via an unspecified brute-force attack.
Ibm Connections
5.3
CVSSv3
CVE-2017-1613
IBM Connections 6.0 could allow an unauthenticated remote malicious user to gain unauthenticated or unauthorized access to non-sensitive Engagement Center template data. IBM X-Force ID: 132954.
Ibm Connections 6.0
5.5
CVSSv3
CVE-2020-4083
HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user.
Hcltech Connections 6.5
6.1
CVSSv3
CVE-2023-37533
HCL Connections is vulnerable to reflected cross-site scripting (XSS) where an attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user after visiting the vulnerable URL which contains the malicious script code. This may allow the...
Hcltech Connections 8.0
5.4
CVSSv3
CVE-2017-1498
IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129020.
Ibm Connections 5.5.0.0
5.4
CVSSv3
CVE-2021-27746
"HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability"
Hcltechsw Connections 6.0
NA
CVE-2013-0569
Cross-site scripting (XSS) vulnerability in the Communities component in IBM Connections 4.5 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Connections 4.5.0.0
5.4
CVSSv3
CVE-2020-4082
The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security c...
Hcltech Connections 5.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »