Ibm Water Operations For Waternamics vulnerabilities

10 known vulnerabilities affecting ibm/water_operations_for_waternamics.

Total CVEs

10

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH6MEDIUM4

Vulnerabilities

Page 1 of 1

CVE-2020-4317MEDIUMCVSS 5.4v5.1.0v5.1.0.3+5 more2020-07-28

CVE-2020-4317 [MEDIUM] CWE-79 CVE-2020-4317: IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a

CVE-2020-4318MEDIUMCVSS 5.4v5.1.0v5.1.0.3+5 more2020-07-28

CVE-2020-4318 [MEDIUM] CWE-79 CVE-2020-4318: IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a

CVE-2019-4321HIGHCVSS 7.5≥ 5.1.0, ≤ 5.2.1.12019-09-05

CVE-2019-4321 [HIGH] CWE-521 CVE-2019-4321: IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency M IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM Water Operations for Waternamics V5.1.0 - V5.2.1.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 161201.

CVE-2019-4419HIGHCVSS 8.2≥ 5.1.0, ≤ 5.2.1.12019-08-20

CVE-2019-4419 [HIGH] CWE-611 CVE-2019-4419: IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Inje IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162737.

CVE-2019-4420MEDIUMCVSS 6.2≥ 5.1.0, ≤ 5.2.1.12019-08-20

CVE-2019-4420 [MEDIUM] CWE-209 CVE-2019-4420: IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, reve IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive information that could aid in further attacks against the system. IBM X-Force ID: 162738.

CVE-2019-4067HIGHCVSS 7.5≥ 5.1.0, ≤ 5.2.1.12019-06-07

CVE-2019-4067 [HIGH] CWE-521 CVE-2019-4067: IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should have IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 157012.

CVE-2019-4068HIGHCVSS 7.5≥ 5.1.0, ≤ 5.2.1.12019-06-07

CVE-2019-4068 [HIGH] CWE-307 CVE-2019-4068: IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to user enumeration, allow IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to user enumeration, allowing an attacker to brute force into the system. IBM X-Force ID: 157013.

CVE-2019-4069HIGHCVSS 8.8≥ 5.1.0, ≤ 5.2.1.12019-06-07

CVE-2019-4069 [HIGH] CWE-434 CVE-2019-4069: IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, a IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, allowing an attacker to upload malicious content. IBM X-Force ID: 157014.

CVE-2019-4066HIGHCVSS 8.8≥ 5.1.0, ≤ 5.2.1.12019-06-07

CVE-2019-4066 [HIGH] CVE-2019-4066: IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated user to crea IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated user to create arbitrary users which could cause ID management issues and result in code execution. IBM X-Force ID: 157011.

CVE-2019-4070MEDIUMCVSS 5.4≥ 5.1.0, ≤ 5.2.1.12019-06-07

CVE-2019-4070 [MEDIUM] CWE-79 CVE-2019-4070: IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting. T IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157015.