Filtered by vendor Ibm
Subscriptions
Filtered by product Cyber Fraud
Subscriptions
Total
6 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-97683 | 1 Ibm | 1 Cyber Fraud | 2026-11-13 | 2.5 Low |
| IBM Cyber Fraud 1.0.0 through 1.1.0 could allow a local attacker to bypass security restrictions due to a missing or misconfigured security context. | ||||
| CVE-2026-9870 | 1 Ibm | 1 Cyber Fraud | 2026-11-13 | 6.1 Medium |
| IBM Cyber Fraud 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | ||||
| CVE-2026-108290 | 1 Ibm | 1 Cyber Fraud | 2026-11-13 | 4 Medium |
| IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an attacker with local access to a container to extract sensitive information due to unrestrictive network policies. | ||||
| CVE-2026-9821 | 1 Ibm | 1 Cyber Fraud | 2026-11-13 | 5.3 Medium |
| IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files. | ||||
| CVE-2026-9825 | 1 Ibm | 1 Cyber Fraud | 2026-10-21 | 3.7 Low |
| IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks. | ||||
| CVE-2026-87800 | 1 Ibm | 1 Cyber Fraud | 2026-10-21 | 6.8 Medium |
| IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type. | ||||
Page 1 of 1.