CVE-2017-1327 - Vulnerability Details

Vendors	Products
Ibm	Inotes

Link	Providers
http://www.ibm.com/support/docview.wss?uid=swg22003664
http://www.securityfocus.com/bid/100139
https://exchange.xforce.ibmcloud.com/vulnerabilities/126062

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "iNotes", "vendor": "IBM", "versions": [{"status": "affected", "version": "9.0"}, {"status": "affected", "version": "8.5.3"}, {"status": "affected", "version": "8.5.2"}, {"status": "affected", "version": "8.5.1"}, {"status": "affected", "version": "8.5"}, {"status": "affected", "version": "8.5.3.6"}, {"status": "affected", "version": "9.0.1"}, {"status": "affected", "version": "8.5.1.5"}, {"status": "affected", "version": "8.5.2.4"}, {"status": "affected", "version": "8.5.2.1"}, {"status": "affected", "version": "8.5.3.1"}, {"status": "affected", "version": "9.0.1.1"}, {"status": "affected", "version": "8.5.1.1"}, {"status": "affected", "version": "9.0.1.8"}]}], "datePublic": "2017-06-01T00:00:00", "descriptions": [{"lang": "en", "value": "IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062."}], "problemTypes": [{"descriptions": [{"description": "Cross-Site Scripting", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-05T09:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22003664"}, {"tags": ["x_refsource_MISC"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126062"}, {"name": "100139", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/100139"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "DATE_PUBLIC": "2017-06-01T00:00:00", "ID": "CVE-2017-1327", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "iNotes", "version": {"version_data": [{"version_value": "9.0"}, {"version_value": "8.5.3"}, {"version_value": "8.5.2"}, {"version_value": "8.5.1"}, {"version_value": "8.5"}, {"version_value": "8.5.3.6"}, {"version_value": "9.0.1"}, {"version_value": "8.5.1.5"}, {"version_value": "8.5.2.4"}, {"version_value": "8.5.2.1"}, {"version_value": "8.5.3.1"}, {"version_value": "9.0.1.1"}, {"version_value": "8.5.1.1"}, {"version_value": "9.0.1.8"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Cross-Site Scripting"}]}]}, "references": {"reference_data": [{"name": "http://www.ibm.com/support/docview.wss?uid=swg22003664", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg22003664"}, {"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126062", "refsource": "MISC", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126062"}, {"name": "100139", "refsource": "BID", "url": "http://www.securityfocus.com/bid/100139"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T13:32:29.282Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22003664"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126062"}, {"name": "100139", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/100139"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2017-1327", "datePublished": "2017-08-03T15:00:00Z", "dateReserved": "2016-11-30T00:00:00", "dateUpdated": "2024-09-16T22:16:08.098Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : iNotes (string)

vendor : IBM (string)

versions : [ »

0 : { »

status : affected (string)

version : 9.0 (string)

}

1 : { »

status : affected (string)

version : 8.5.3 (string)

}

2 : { »

status : affected (string)

version : 8.5.2 (string)

}

3 : { »

status : affected (string)

version : 8.5.1 (string)

}

4 : { »

status : affected (string)

version : 8.5 (string)

}

5 : { »

status : affected (string)

version : 8.5.3.6 (string)

}

6 : { »

status : affected (string)

version : 9.0.1 (string)

}

7 : { »

status : affected (string)

version : 8.5.1.5 (string)

}

8 : { »

status : affected (string)

version : 8.5.2.4 (string)

}

9 : { »

status : affected (string)

version : 8.5.2.1 (string)

}

10 : { »

status : affected (string)

version : 8.5.3.1 (string)

}

11 : { »

status : affected (string)

version : 9.0.1.1 (string)

}

12 : { »

status : affected (string)

version : 8.5.1.1 (string)

}

13 : { »

status : affected (string)

version : 9.0.1.8 (string)

}

]

}

]

datePublic : 2017-06-01T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Cross-Site Scripting (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-08-05T09:57:01 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22003664 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/126062 (string)

}

2 : { »

name : 100139 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/100139 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

DATE_PUBLIC : 2017-06-01T00:00:00 (string)

ID : CVE-2017-1327 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : iNotes (string)

version : { »

version_data : [ »

0 : { »

version_value : 9.0 (string)

}

1 : { »

version_value : 8.5.3 (string)

}

2 : { »

version_value : 8.5.2 (string)

}

3 : { »

version_value : 8.5.1 (string)

}

4 : { »

version_value : 8.5 (string)

}

5 : { »

version_value : 8.5.3.6 (string)

}

6 : { »

version_value : 9.0.1 (string)

}

7 : { »

version_value : 8.5.1.5 (string)

}

8 : { »

version_value : 8.5.2.4 (string)

}

9 : { »

version_value : 8.5.2.1 (string)

}

10 : { »

version_value : 8.5.3.1 (string)

}

11 : { »

version_value : 9.0.1.1 (string)

}

12 : { »

version_value : 8.5.1.1 (string)

}

13 : { »

version_value : 9.0.1.8 (string)

}

]

}

]

}

vendor_name : IBM (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Cross-Site Scripting (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : http://www.ibm.com/support/docview.wss?uid=swg22003664 (string)

refsource : CONFIRM (string)

url : http://www.ibm.com/support/docview.wss?uid=swg22003664 (string)

}

1 : { »

name : https://exchange.xforce.ibmcloud.com/vulnerabilities/126062 (string)

refsource : MISC (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/126062 (string)

}

2 : { »

name : 100139 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/100139 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T13:32:29.282Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22003664 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/126062 (string)

}

2 : { »

name : 100139 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/100139 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2017-1327 (string)

datePublished : 2017-08-03T15:00:00Z (string)

dateReserved : 2016-11-30T00:00:00 (string)

dateUpdated : 2024-09-16T22:16:08.098Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "16FE6AAC-7B25-40EA-9D25-128D743F18A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "49FF4C09-76B3-4CCA-9EBA-530B4CB0314D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:8.5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "CC0FE386-25E0-452F-A0E4-C54901C8870B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:8.5.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "EC844FD9-65ED-4223-8B60-29EDC5EBEB3E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "B097CA3C-2ABA-489E-86C1-EEF891AF7094", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:8.5.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "14F15C5B-D465-4AE6-B70B-E03EE32A0D54", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:8.5.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "1B100002-E6E8-4FB8-A1A8-02BFBB37A126", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "A34CFCD5-D0F8-46E4-BA5F-24AA9CD378A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:8.5.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "7EFF2543-619A-49EA-909C-49C82397A89E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:8.5.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "F0E9875B-4AEF-4D61-BEAE-BA5DA1F66C96", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "975E8316-D4C3-40B7-8E57-E871D0327271", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:9.0.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "4E0C5AFE-62C7-4A6C-991B-222FF28DF92B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:9.0.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "DF4C11BF-8A63-4ED9-871D-C3366D766CC1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:inotes:9.0.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "A6AF1F5E-1CAD-4C06-99CA-54B60CD5E099", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062."}, {"lang": "es", "value": "IBM iNotes 8.5 y 9.0 es vulnerable a Cross-Site Scripting (XSS). La vulnerabilidad permite a los usuarios que incrusten c\u00f3digo JavaScript arbitrario en la interfaz web de usuario, alterando la funcionalidad y pudiendo provocar que se revelen las credenciales en una sesi\u00f3n abierta de confianza. IBM X-Force ID: 126062."}], "id": "CVE-2017-1327", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-08-03T15:29:00.530", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22003664"}, {"source": "psirt@us.ibm.com", "url": "http://www.securityfocus.com/bid/100139"}, {"source": "psirt@us.ibm.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126062"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22003664"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/100139"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126062"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 16FE6AAC-7B25-40EA-9D25-128D743F18A9 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 49FF4C09-76B3-4CCA-9EBA-530B4CB0314D (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:inotes:8.5.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : CC0FE386-25E0-452F-A0E4-C54901C8870B (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:inotes:8.5.1.5:*:*:*:*:*:*:* (string)

matchCriteriaId : EC844FD9-65ED-4223-8B60-29EDC5EBEB3E (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B097CA3C-2ABA-489E-86C1-EEF891AF7094 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:inotes:8.5.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 14F15C5B-D465-4AE6-B70B-E03EE32A0D54 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:inotes:8.5.2.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 1B100002-E6E8-4FB8-A1A8-02BFBB37A126 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:* (string)

matchCriteriaId : A34CFCD5-D0F8-46E4-BA5F-24AA9CD378A6 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:inotes:8.5.3.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 7EFF2543-619A-49EA-909C-49C82397A89E (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ibm:inotes:8.5.3.6:*:*:*:*:*:*:* (string)

matchCriteriaId : F0E9875B-4AEF-4D61-BEAE-BA5DA1F66C96 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 975E8316-D4C3-40B7-8E57-E871D0327271 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ibm:inotes:9.0.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 4E0C5AFE-62C7-4A6C-991B-222FF28DF92B (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ibm:inotes:9.0.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : DF4C11BF-8A63-4ED9-871D-C3366D766CC1 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ibm:inotes:9.0.1.8:*:*:*:*:*:*:* (string)

matchCriteriaId : A6AF1F5E-1CAD-4C06-99CA-54B60CD5E099 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126062. (string)

}

1 : { »

lang : es (string)

value : IBM iNotes 8.5 y 9.0 es vulnerable a Cross-Site Scripting (XSS). La vulnerabilidad permite a los usuarios que incrusten código JavaScript arbitrario en la interfaz web de usuario, alterando la funcionalidad y pudiendo provocar que se revelen las credenciales en una sesión abierta de confianza. IBM X-Force ID: 126062. (string)

}

]

id : CVE-2017-1327 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:N/C:N/I:P/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : true (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 2.7 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-08-03T15:29:00.530 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22003664 (string)

}

1 : { »

source : psirt@us.ibm.com (string)

url : http://www.securityfocus.com/bid/100139 (string)

}

2 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/126062 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22003664 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securityfocus.com/bid/100139 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/126062 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object