IBM / Forms Experience Builder
5 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2014-6169 | Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inject arbitrary web script or HTML via uns… | MEDIUM | 5.4 | Apr 12, 2018 |
| CVE-2016-0369 | XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information v… | LOW | 2.7 | Feb 21, 2018 |
| CVE-2016-6001 | IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing for some information d… | LOW | 3.1 | Feb 1, 2017 |
| CVE-2016-2884 | Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3.1, in an unspecified non-default configuration, al… | HIGH | 8.0 | Nov 30, 2016 |
| CVE-2016-0370 | Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web… | LOW | 2.7 | Sep 1, 2016 |
Showing 1 to 5 of 5 CVEs