4
CVSSv2

CVE-2018-1666

Published: 07/02/2019 Updated: 24/08/2020
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

Vulnerability Summary

IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 up to and including 7.6.0.11, 7.5.2.0 up to and including 7.5.2.18, 7.5.1.0 up to and including 7.5.1.18, 7.5.0.0 up to and including 7.5.0.19, and 7.7.0.0 up to and including 7.7.1.3 could allow an authenticated user to inject arbitrary messages that would be displayed on the UI. IBM X-Force ID: 144892.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm datapower gateway

ibm datapower gateway 2018.4.1.0

Vendor Advisories

IBM MQ Appliance has addressed the following UI message injection vulnerability ...
IBM DataPower Gateway has addressed the following vulnerability: CVE-2018-1666 ...