Description

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 150017.

Remediation

References

CVE-2018-1813

Related Vulnerabilities

WordPress Plugin Social Tape Cross-Site Request Forgery (1.0)

WordPress Plugin Properties and Agents-Real Estate Manager Cross-Site Scripting (6.7.1)

MySQL CVE-2017-3244 Vulnerability (CVE-2017-3244)

ownCloud CVE-2013-0303 Vulnerability (CVE-2013-0303)

WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.8)

Severity

Medium

Classification

CVE-2018-1813 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities