Leads

5 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-0131 LOW PATCH Monitor

Cross-site scripting (XSS) vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.

IBM XSS Leads

NVD

CVSS 2.0

3.5

EPSS

0.2%

CVE-2015-0127 LOW Monitor

IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict use of. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

IBM Information Disclosure Leads

NVD

CVSS 2.0

3.5

EPSS

0.1%

CVE-2015-0126 MEDIUM This Month

IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

IBM Authentication Bypass Leads

NVD

CVSS 2.0

6.5

EPSS

0.2%

CVE-2015-0116 LOW PATCH Monitor

IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict the. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.

IBM CSRF Leads

NVD

CVSS 2.0

3.5

EPSS

0.2%

CVE-2015-0115 MEDIUM PATCH This Month

Cross-site request forgery (CSRF) vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable.

IBM CSRF Leads

NVD

CVSS 2.0

6.0

EPSS

0.1%

CVE-2015-0131

EPSS 0% CVSS 3.5

LOW PATCH Monitor

IBM XSS Leads

NVD

CVE-2015-0127

EPSS 0% CVSS 3.5

LOW Monitor

IBM Information Disclosure Leads

NVD

CVE-2015-0126

EPSS 0% CVSS 6.5

MEDIUM This Month

IBM Authentication Bypass Leads

NVD

CVE-2015-0116

EPSS 0% CVSS 3.5

LOW PATCH Monitor

IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict the. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.

IBM CSRF Leads

NVD

CVE-2015-0115

EPSS 0% CVSS 6.0

MEDIUM PATCH This Month

IBM CSRF Leads

NVD