Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Platform Symphony
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-5387 1 Ibm 1 Platform Symphony 2017-08-29 4.3 MEDIUM N/A
Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service (process crash or hang) via a malformed SOAP request with a large amount of request data.
CVE-2013-5400 1 Ibm 1 Platform Symphony 2017-08-29 10.0 HIGH N/A
An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain "local environment" access via unknown vectors.
CVE-2013-6305 1 Ibm 1 Platform Symphony 2017-08-29 4.3 MEDIUM N/A
IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key.