CVE-2018-1774

IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the developer portal and analytics that could contain malicious…

High · published November 9, 2018

CVSS v3.0
8.9
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the developer portal and analytics that could contain malicious commands that would be executed once opened by an administrator. IBM X-Force ID: 148692.

The record
Technical detail
CVSS v3.0
8.9 · HIGH
Vector
CVSS:3.0/A:L/AC:L/AV:N/C:H/I:H/PR:L/S:C/UI:R/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01061 · 64.1th percentile
Published
2018-11-09T00:00Z
EPSS history
Timeline
  • 09 NOV 00:00Z
    IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the developer portal and analytics that could contain malicious…
    cvelistv5