Vulnerabilities

TI-2015-04187 CVE-2015-4987 · GHSA-mqvh-83g7-mc9g

The search and replay servers in IBM Tealeaf Customer Experience 8.0 through 9.0.2 allow…

LOW 31

The search and replay servers in IBM Tealeaf Customer Experience 8.0 through 9.0.2 allow remote attackers to bypass authentication via unspecified vectors.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.01112 Published 2018-03-27 No fix listed CWE-287

TI-2017-01045 CVE-2017-1279 · GHSA-379v-m5cr-x8xw

Path traversal in IBM Tealeaf Customer Experience

LOW 32

IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker to traverse directories on the system.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0182 Published 2018-01-26 No fix listed CWE-22

TI-2017-00982 CVE-2017-1204 · GHSA-87gx-294q-7xrf

Hard-coded credentials in IBM Tealeaf Customer Experience

MEDIUM 45

IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains hard-coded credentials.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01623 Published 2018-01-26 No fix listed CWE-798

TI-2016-02492 CVE-2016-2983 · GHSA-3wjc-53m5-ffxg

Improper input validation in IBM Tealeaf Customer Experience

LOW 39

IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker under unusual circumstances to read operational data or TLS session state for any active sessions, cause denial of service, or bypass secu…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0171 Published 2018-01-26 No fix listed CWE-20

TI-2016-05154 CVE-2016-5968 · GHSA-328r-gg4v-8wh6

The Replay Server in IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x…

LOW 26

The Replay Server in IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A b…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00877 Published 2016-11-25 No fix listed CWE-918

TI-2015-04175 CVE-2015-4961 · GHSA-w4jg-2x2v-3j87

IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9…

LOW 14

IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224 FP3…

CVSS 3.0LOW 2.6 Adjacent network Low privileges No interaction EPSS 0.00471 Published 2016-11-24 No fix listed CWE-200

TI-2016-05178 CVE-2016-5997 · GHSA-r2mx-8c88-f5cf

The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before…

LOW 30

The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A bef…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00819 Published 2016-09-26 No fix listed CWE-640

TI-2016-05177 CVE-2016-5996 · GHSA-mxvf-fgg2-9qxj

The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before…

LOW 36

The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A bef…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01381 Published 2016-09-26 No fix listed CWE-640

TI-2016-05162 CVE-2016-5978 · GHSA-775r-w48q-7jjj

Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf…

LOW 25

Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.51…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00615 Published 2016-09-26 No fix listed CWE-79

TI-2016-05161 CVE-2016-5977 · GHSA-mwhv-wr6g-vr99

Open redirect vulnerability in the web portal in IBM Tealeaf Customer Experience before…

LOW 31

Open redirect vulnerability in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before…

CVSS 3.0MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00761 Published 2016-09-26 No fix listed CWE-601

TI-2016-05160 CVE-2016-5976 · GHSA-c3jc-mrhx-p2gf

The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before…

LOW 25

The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A bef…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01403 Published 2016-09-26 No fix listed CWE-200

TI-2016-05159 CVE-2016-5975 · GHSA-3fr5-hvqc-j2q7

Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf…

LOW 25

Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.51…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00615 Published 2016-09-26 No fix listed CWE-79

TI-2015-04188 CVE-2015-4988 · GHSA-979j-7fmf-jxq3

Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience…

MEDIUM 43

Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.109…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0301 Published 2016-01-18 No fix listed CWE-22

TI-2015-04190 CVE-2015-4990 · GHSA-c9m3-gjc2-vcx4

The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026…

LOW 18

The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows local…

CVSS 3.0MEDIUM 4.0 Local High privileges User interaction EPSS 0.00254 Published 2016-01-02 No fix listed CWE-200

TI-2015-04189 CVE-2015-4989 · GHSA-35w2-fcvf-666f

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026…

LOW 19

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remot…

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.0092 Published 2016-01-02 No fix listed CWE-200

Vulnerabilities

Filters