https://zblog.zone.ci/安全领域涉猎者-乌云独行地带 | ZONE.CI 全球网https://zblog.zone.ci/?id=682894 <!-- .col --> <!-- .metric --> <p class="metric-label"> CVE编号 </p> CVE-2015-7468 <!-- /.metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 利用情况 </p> 暂无 <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 补丁情况 </p> N/A <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 披露时间 </p> 2016-01-17 <!-- .metric --> <!-- /.col --> <!-- .col --> <h6 class="border-bottom border-gray pb-2 mb-0">漏洞描述</h6> IBM Jazz Reporting Service是美国IBM公司的一套用于发现跨项目报表的应用程序。Report Builder是其中的一个用于快速创建报表的工具。 <br> IBM Jazz Reporting Service的Report Builder存在安全漏洞，允许远程攻击者可利用该漏洞绕过安全限制，执行管理任务。 <h6 class="border-bottom border-gray pb-2 mb-0">解决建议</h6> 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：<br>http://www-01.ibm.com/support/docview.wss?uid=swg21972485 <table class="table table-sm table-responsive"> <thead> <tr> <th style="border-bottom: 0px solid #dee2e6;padding: 0px 0px 4px 0px" scope="col"> <h6 style="margin-bottom: 5px">参考链接</h6> </th> <th style="border-bottom: 0px solid #dee2e6;width: 30%" scope="col"></th> </tr> </thead> <tbody> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg21972485 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> </tbody> </table> <h6 class="border-bottom border-gray pb-2 mb-0">受影响软件情况 </h6> <table class="table"> <thead> <tr class="border-bottom" style="font-size: 16px;font-weight: 700;line-height: 24px;border-top: none"> <td>#</td> <td nowrap="nowrap">类型</td> <td nowrap="nowrap">厂商</td> <td nowrap="nowrap">产品</td> <td nowrap="nowrap" align="center">版本</td> <td nowrap="nowrap" colspan="2" align="center">影响面</td> </tr> </thead> <tbody> <tr class=''> <th rowspan="9" class="py-0 collapse-index" data-collapse-span="9" style="font-weight: 400"> 1 </th> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> jazz_reporting_service </td> <td class="bg-light" align="center"> 5.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> jazz_reporting_service </td> <td class="bg-light" align="center"> 5.0.1 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> jazz_reporting_service </td> <td class="bg-light" align="center"> 5.0.2 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> jazz_reporting_service </td> <td class="bg-light" align="center"> 6.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> </tr> </tbody> </table> <header class="cvss-breakdown__header"> CVSS3评分 4.3 <span style="width: 43.0%"></span> </header> <ul class="cvss-breakdown__items"> <li class="cvss-breakdown__item"> 攻击路径 <i class="bi bi-info-circle" data-toggle="tooltip" data-placement="top" title="该指标反映了漏洞利用途径"></i> 网络 </li> <li class="cvss-breakdown__item"> 攻击复杂度 低 </li> <li class="cvss-breakdown__item"> 权限要求 低 </li> <li class="cvss-breakdown__item"> 影响范围 未更改 </li> <li class="cvss-breakdown__item"> 用户交互 无 </li> <li class="cvss-breakdown__item"> 可用性 无 </li> <li class="cvss-breakdown__item"> 保密性 无 </li> <li class="cvss-breakdown__item"> 完整性 低 </li> </ul> CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N <thead> <tr style="font-size: 16px;font-weight: 700;line-height: 24px"> <td nowrap="nowrap" style="border-top: none">CWE-ID</td> <td nowrap="nowrap" style="border-top: none;width: 70%">漏洞类型</td> </tr> </thead> <tbody> <tr> <td> CWE-264 </td> <td> 权限、特权和访问控制 </td> </tr> </tbody> Tue, 26 Apr 2022 15:25:30 +0800https://zblog.zone.ci/?id=682893 <!-- .col --> <!-- .metric --> <p class="metric-label"> CVE编号 </p> CVE-2015-7467 <!-- /.metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 利用情况 </p> 暂无 <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 补丁情况 </p> N/A <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 披露时间 </p> 2016-01-17 <!-- .metric --> <!-- /.col --> <!-- .col --> <h6 class="border-bottom border-gray pb-2 mb-0">漏洞描述</h6> IBM Jazz Reporting Service是美国IBM公司的一套用于发现跨项目报表的应用程序。Report Builder是其中的一个用于快速创建报表的工具。 <br> IBM Jazz Reporting Service的Report Builder存在跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 <h6 class="border-bottom border-gray pb-2 mb-0">解决建议</h6> 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：<br>http://www-01.ibm.com/support/docview.wss?uid=swg21972485 <table class="table table-sm table-responsive"> <thead> <tr> <th style="border-bottom: 0px solid #dee2e6;padding: 0px 0px 4px 0px" scope="col"> <h6 style="margin-bottom: 5px">参考链接</h6> </th> <th style="border-bottom: 0px solid #dee2e6;width: 30%" scope="col"></th> </tr> </thead> <tbody> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg21972485 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> </tbody> </table> <h6 class="border-bottom border-gray pb-2 mb-0">受影响软件情况 </h6> <table class="table"> <thead> <tr class="border-bottom" style="font-size: 16px;font-weight: 700;line-height: 24px;border-top: none"> <td>#</td> <td nowrap="nowrap">类型</td> <td nowrap="nowrap">厂商</td> <td nowrap="nowrap">产品</td> <td nowrap="nowrap" align="center">版本</td> <td nowrap="nowrap" colspan="2" align="center">影响面</td> </tr> </thead> <tbody> <tr class=''> <th rowspan="9" class="py-0 collapse-index" data-collapse-span="9" style="font-weight: 400"> 1 </th> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> jazz_reporting_service </td> <td class="bg-light" align="center"> 5.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> jazz_reporting_service </td> <td class="bg-light" align="center"> 5.0.1 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> jazz_reporting_service </td> <td class="bg-light" align="center"> 5.0.2 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> jazz_reporting_service </td> <td class="bg-light" align="center"> 6.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> </tr> </tbody> </table> <header class="cvss-breakdown__header"> CVSS3评分 5.4 <span style="width: 54.0%"></span> </header> <ul class="cvss-breakdown__items"> <li class="cvss-breakdown__item"> 攻击路径 <i class="bi bi-info-circle" data-toggle="tooltip" data-placement="top" title="该指标反映了漏洞利用途径"></i> 网络 </li> <li class="cvss-breakdown__item"> 攻击复杂度 低 </li> <li class="cvss-breakdown__item"> 权限要求 低 </li> <li class="cvss-breakdown__item"> 影响范围 已更改 </li> <li class="cvss-breakdown__item"> 用户交互 需要 </li> <li class="cvss-breakdown__item"> 可用性 无 </li> <li class="cvss-breakdown__item"> 保密性 低 </li> <li class="cvss-breakdown__item"> 完整性 低 </li> </ul> CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N <thead> <tr style="font-size: 16px;font-weight: 700;line-height: 24px"> <td nowrap="nowrap" style="border-top: none">CWE-ID</td> <td nowrap="nowrap" style="border-top: none;width: 70%">漏洞类型</td> </tr> </thead> <tbody> <tr> <td> CWE-79 </td> <td> 在Web页面生成时对输入的转义处理不恰当（跨站脚本） </td> </tr> </tbody> Tue, 26 Apr 2022 15:25:27 +0800https://zblog.zone.ci/?id=682892 <!-- .col --> <!-- .metric --> <p class="metric-label"> CVE编号 </p> CVE-2015-7414 <!-- /.metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 利用情况 </p> 暂无 <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 补丁情况 </p> N/A <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 披露时间 </p> 2016-01-17 <!-- .metric --> <!-- /.col --> <!-- .col --> <h6 class="border-bottom border-gray pb-2 mb-0">漏洞描述</h6> IBM InfoSphere Master Data Management（MDM） - Collaborative Edition是一套为产品信息管理（PIM）提供协同编辑的解决方案。 <br> IBM InfoSphere MDM - Collaborative EditionGDS组件中存在跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 <h6 class="border-bottom border-gray pb-2 mb-0">解决建议</h6> 用户可参考如下厂商提供的安全补丁以修复该漏洞：<br>http://www.ibm.com/ <table class="table table-sm table-responsive"> <thead> <tr> <th style="border-bottom: 0px solid #dee2e6;padding: 0px 0px 4px 0px" scope="col"> <h6 style="margin-bottom: 5px">参考链接</h6> </th> <th style="border-bottom: 0px solid #dee2e6;width: 30%" scope="col"></th> </tr> </thead> <tbody> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg21971545 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> </tbody> </table> <h6 class="border-bottom border-gray pb-2 mb-0">受影响软件情况 </h6> <table class="table"> <thead> <tr class="border-bottom" style="font-size: 16px;font-weight: 700;line-height: 24px;border-top: none"> <td>#</td> <td nowrap="nowrap">类型</td> <td nowrap="nowrap">厂商</td> <td nowrap="nowrap">产品</td> <td nowrap="nowrap" align="center">版本</td> <td nowrap="nowrap" colspan="2" align="center">影响面</td> </tr> </thead> <tbody> <tr class=''> <th rowspan="11" class="py-0 collapse-index" data-collapse-span="11" style="font-weight: 400"> 1 </th> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> infosphere_master_data_management </td> <td class="bg-light" align="center"> 10.1 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> infosphere_master_data_management </td> <td class="bg-light" align="center"> 11.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> infosphere_master_data_management </td> <td class="bg-light" align="center"> 11.3 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> infosphere_master_data_management </td> <td class="bg-light" align="center"> 11.4 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> infosphere_master_data_management </td> <td class="bg-light" align="center"> 9.1 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> </tr> </tbody> </table> <header class="cvss-breakdown__header"> CVSS3评分 5.4 <span style="width: 54.0%"></span> </header> <ul class="cvss-breakdown__items"> <li class="cvss-breakdown__item"> 攻击路径 <i class="bi bi-info-circle" data-toggle="tooltip" data-placement="top" title="该指标反映了漏洞利用途径"></i> 网络 </li> <li class="cvss-breakdown__item"> 攻击复杂度 低 </li> <li class="cvss-breakdown__item"> 权限要求 低 </li> <li class="cvss-breakdown__item"> 影响范围 已更改 </li> <li class="cvss-breakdown__item"> 用户交互 需要 </li> <li class="cvss-breakdown__item"> 可用性 无 </li> <li class="cvss-breakdown__item"> 保密性 低 </li> <li class="cvss-breakdown__item"> 完整性 低 </li> </ul> CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N <thead> <tr style="font-size: 16px;font-weight: 700;line-height: 24px"> <td nowrap="nowrap" style="border-top: none">CWE-ID</td> <td nowrap="nowrap" style="border-top: none;width: 70%">漏洞类型</td> </tr> </thead> <tbody> <tr> <td> CWE-79 </td> <td> 在Web页面生成时对输入的转义处理不恰当（跨站脚本） </td> </tr> </tbody> Tue, 26 Apr 2022 15:25:23 +0800https://zblog.zone.ci/?id=682891 <!-- .col --> <!-- .metric --> <p class="metric-label"> CVE编号 </p> CVE-2015-4959 <!-- /.metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 利用情况 </p> 暂无 <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 补丁情况 </p> N/A <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 披露时间 </p> 2016-01-18 <!-- .metric --> <!-- /.col --> <!-- .col --> <h6 class="border-bottom border-gray pb-2 mb-0">漏洞描述</h6> IBM Tivoli Federated Identity Manager是美国IBM公司的一款跨企业的联邦身份管理产品。 <br> IBM Tivoli Federated Identity Manager存在跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 <h6 class="border-bottom border-gray pb-2 mb-0">解决建议</h6> 用户可参考如下厂商提供的安全补丁以修复该漏洞：<br>http://www.ibm.com/ <table class="table table-sm table-responsive"> <thead> <tr> <th style="border-bottom: 0px solid #dee2e6;padding: 0px 0px 4px 0px" scope="col"> <h6 style="margin-bottom: 5px">参考链接</h6> </th> <th style="border-bottom: 0px solid #dee2e6;width: 30%" scope="col"></th> </tr> </thead> <tbody> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1IV77558 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg21974157 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www.securitytracker.com/id/1034697 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> </tbody> </table> <h6 class="border-bottom border-gray pb-2 mb-0">受影响软件情况 </h6> <table class="table"> <thead> <tr class="border-bottom" style="font-size: 16px;font-weight: 700;line-height: 24px;border-top: none"> <td>#</td> <td nowrap="nowrap">类型</td> <td nowrap="nowrap">厂商</td> <td nowrap="nowrap">产品</td> <td nowrap="nowrap" align="center">版本</td> <td nowrap="nowrap" colspan="2" align="center">影响面</td> </tr> </thead> <tbody> <tr class=''> <th rowspan="3" class="py-0 collapse-index" data-collapse-span="3" style="font-weight: 400"> 1 </th> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> tivoli_federated_identity_manager </td> <td class="bg-light" align="center"> 6.2.2 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> </tr> </tbody> </table> <header class="cvss-breakdown__header"> CVSS3评分 6.1 <span style="width: 61.0%"></span> </header> <ul class="cvss-breakdown__items"> <li class="cvss-breakdown__item"> 攻击路径 <i class="bi bi-info-circle" data-toggle="tooltip" data-placement="top" title="该指标反映了漏洞利用途径"></i> 网络 </li> <li class="cvss-breakdown__item"> 攻击复杂度 低 </li> <li class="cvss-breakdown__item"> 权限要求 无 </li> <li class="cvss-breakdown__item"> 影响范围 已更改 </li> <li class="cvss-breakdown__item"> 用户交互 需要 </li> <li class="cvss-breakdown__item"> 可用性 无 </li> <li class="cvss-breakdown__item"> 保密性 低 </li> <li class="cvss-breakdown__item"> 完整性 低 </li> </ul> CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N <thead> <tr style="font-size: 16px;font-weight: 700;line-height: 24px"> <td nowrap="nowrap" style="border-top: none">CWE-ID</td> <td nowrap="nowrap" style="border-top: none;width: 70%">漏洞类型</td> </tr> </thead> <tbody> <tr> <td> CWE-79 </td> <td> 在Web页面生成时对输入的转义处理不恰当（跨站脚本） </td> </tr> </tbody> Tue, 26 Apr 2022 15:25:16 +0800https://zblog.zone.ci/?id=682890 <!-- .col --> <!-- .metric --> <p class="metric-label"> CVE编号 </p> CVE-2015-4942 <!-- /.metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 利用情况 </p> 暂无 <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 补丁情况 </p> N/A <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 披露时间 </p> 2016-01-18 <!-- .metric --> <!-- /.col --> <!-- .col --> <h6 class="border-bottom border-gray pb-2 mb-0">漏洞描述</h6> IBM WebSphere MQ Light是IBM公司的一个基于IBM Bluemix的消息服务。 <br> IBM WebSphere MQ Light 1.0.2之前的1.x版本中存在安全漏洞。远程攻击者可利用该漏洞造成拒绝服务。 <h6 class="border-bottom border-gray pb-2 mb-0">解决建议</h6> 用户可参考如下供应商提供的安全公告获得补丁信息：<br>http://www-01.ibm.com/support/docview.wss?uid=swg21974169 <table class="table table-sm table-responsive"> <thead> <tr> <th style="border-bottom: 0px solid #dee2e6;padding: 0px 0px 4px 0px" scope="col"> <h6 style="margin-bottom: 5px">参考链接</h6> </th> <th style="border-bottom: 0px solid #dee2e6;width: 30%" scope="col"></th> </tr> </thead> <tbody> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg21974169 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www.securitytracker.com/id/1034698 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> </tbody> </table> <h6 class="border-bottom border-gray pb-2 mb-0">受影响软件情况 </h6> <table class="table"> <thead> <tr class="border-bottom" style="font-size: 16px;font-weight: 700;line-height: 24px;border-top: none"> <td>#</td> <td nowrap="nowrap">类型</td> <td nowrap="nowrap">厂商</td> <td nowrap="nowrap">产品</td> <td nowrap="nowrap" align="center">版本</td> <td nowrap="nowrap" colspan="2" align="center">影响面</td> </tr> </thead> <tbody> <tr class=''> <th rowspan="5" class="py-0 collapse-index" data-collapse-span="5" style="font-weight: 400"> 1 </th> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_mq_light </td> <td class="bg-light" align="center"> 1.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_mq_light </td> <td class="bg-light" align="center"> 1.0.0.1 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> </tr> </tbody> </table> <header class="cvss-breakdown__header"> CVSS3评分 5.3 <span style="width: 53.0%"></span> </header> <ul class="cvss-breakdown__items"> <li class="cvss-breakdown__item"> 攻击路径 <i class="bi bi-info-circle" data-toggle="tooltip" data-placement="top" title="该指标反映了漏洞利用途径"></i> 网络 </li> <li class="cvss-breakdown__item"> 攻击复杂度 低 </li> <li class="cvss-breakdown__item"> 权限要求 无 </li> <li class="cvss-breakdown__item"> 影响范围 未更改 </li> <li class="cvss-breakdown__item"> 用户交互 无 </li> <li class="cvss-breakdown__item"> 可用性 低 </li> <li class="cvss-breakdown__item"> 保密性 无 </li> <li class="cvss-breakdown__item"> 完整性 无 </li> </ul> CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L <thead> <tr style="font-size: 16px;font-weight: 700;line-height: 24px"> <td nowrap="nowrap" style="border-top: none">CWE-ID</td> <td nowrap="nowrap" style="border-top: none;width: 70%">漏洞类型</td> </tr> </thead> <tbody> <tr> <td> CWE-399 </td> <td> 资源管理错误 </td> </tr> </tbody> Tue, 26 Apr 2022 15:25:12 +0800https://zblog.zone.ci/?id=682889 <!-- .col --> <!-- .metric --> <p class="metric-label"> CVE编号 </p> CVE-2016-0201 <!-- /.metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 利用情况 </p> 暂无 <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 补丁情况 </p> N/A <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 披露时间 </p> 2016-01-18 <!-- .metric --> <!-- /.col --> <!-- .col --> <h6 class="border-bottom border-gray pb-2 mb-0">漏洞描述</h6> IBM Security Network Protection是美国IBM公司的一套下一代网络入侵防御系统。该系统可监控网络内应用使用、网站访问和操作执行情况，以避免受到恶意软件、僵尸网络等威胁攻击。IBM GSKit（IBM Global Security Toolkit）是用于其中的一套安全管理工具。 <br> IBM Security Network Protection 5.3.1.7之前的5.3.1版本和5.3.2版本的GSKit中存在安全漏洞。远程攻击者可通过触发MD5碰撞利用该漏洞发现证书。 <h6 class="border-bottom border-gray pb-2 mb-0">解决建议</h6> 用户可参考如下供应商提供的安全公告获得补丁信息：<br>http://www-01.ibm.com/support/docview.wss?uid=swg21974242 <table class="table table-sm table-responsive"> <thead> <tr> <th style="border-bottom: 0px solid #dee2e6;padding: 0px 0px 4px 0px" scope="col"> <h6 style="margin-bottom: 5px">参考链接</h6> </th> <th style="border-bottom: 0px solid #dee2e6;width: 30%" scope="col"></th> </tr> </thead> <tbody> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg21974242 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www.securityfocus.com/bid/80883 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www.securitytracker.com/id/1034696 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> </tbody> </table> <h6 class="border-bottom border-gray pb-2 mb-0">受影响软件情况 </h6> <table class="table"> <thead> <tr class="border-bottom" style="font-size: 16px;font-weight: 700;line-height: 24px;border-top: none"> <td>#</td> <td nowrap="nowrap">类型</td> <td nowrap="nowrap">厂商</td> <td nowrap="nowrap">产品</td> <td nowrap="nowrap" align="center">版本</td> <td nowrap="nowrap" colspan="2" align="center">影响面</td> </tr> </thead> <tbody> <tr class=''> <th rowspan="5" class="py-0 collapse-index" data-collapse-span="5" style="font-weight: 400"> 1 </th> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 系统 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> security_network_protection_firmware </td> <td class="bg-light" align="center"> 5.3.1 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 系统 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> security_network_protection_firmware </td> <td class="bg-light" align="center"> 5.3.2 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> </tr> </tbody> </table> <header class="cvss-breakdown__header"> CVSS3评分 5.9 <span style="width: 59.0%"></span> </header> <ul class="cvss-breakdown__items"> <li class="cvss-breakdown__item"> 攻击路径 <i class="bi bi-info-circle" data-toggle="tooltip" data-placement="top" title="该指标反映了漏洞利用途径"></i> 网络 </li> <li class="cvss-breakdown__item"> 攻击复杂度 高 </li> <li class="cvss-breakdown__item"> 权限要求 无 </li> <li class="cvss-breakdown__item"> 影响范围 未更改 </li> <li class="cvss-breakdown__item"> 用户交互 无 </li> <li class="cvss-breakdown__item"> 可用性 无 </li> <li class="cvss-breakdown__item"> 保密性 高 </li> <li class="cvss-breakdown__item"> 完整性 无 </li> </ul> CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N <thead> <tr style="font-size: 16px;font-weight: 700;line-height: 24px"> <td nowrap="nowrap" style="border-top: none">CWE-ID</td> <td nowrap="nowrap" style="border-top: none;width: 70%">漏洞类型</td> </tr> </thead> <tbody> <tr> <td> CWE-200 </td> <td> 信息暴露 </td> </tr> </tbody> Tue, 26 Apr 2022 15:25:04 +0800https://zblog.zone.ci/?id=682888 <!-- .col --> <!-- .metric --> <p class="metric-label"> CVE编号 </p> CVE-2015-7886 <!-- /.metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 利用情况 </p> 暂无 <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 补丁情况 </p> N/A <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 披露时间 </p> 2016-01-18 <!-- .metric --> <!-- /.col --> <!-- .col --> <h6 class="border-bottom border-gray pb-2 mb-0">漏洞描述</h6> NetApp Data ONTAP是美国NetApp公司的一套存储操作系统。该系统支持提升用户的企业应用程序性能和提高数据中心灵活性等。 <br> NetApp Data ONTAP 8.2.4P1之前版本存在安全漏洞。当程序启用7-Mode和HTTP访问时，远程攻击者可利用该漏洞获取敏感的数据卷信息。 <h6 class="border-bottom border-gray pb-2 mb-0">解决建议</h6> 用户可参考如下供应商提供的安全公告获得补丁信息：<br>http://kb.netapp.com/support/index?page=content&amp;id=9010055 <table class="table table-sm table-responsive"> <thead> <tr> <th style="border-bottom: 0px solid #dee2e6;padding: 0px 0px 4px 0px" scope="col"> <h6 style="margin-bottom: 5px">参考链接</h6> </th> <th style="border-bottom: 0px solid #dee2e6;width: 30%" scope="col"></th> </tr> </thead> <tbody> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://kb.netapp.com/support/index?page=content&amp;id=9010055 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> https://security.netapp.com/advisory/ntap-20160114-0002/ </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> </tbody> </table> <h6 class="border-bottom border-gray pb-2 mb-0">受影响软件情况 </h6> <table class="table"> <thead> <tr class="border-bottom" style="font-size: 16px;font-weight: 700;line-height: 24px;border-top: none"> <td>#</td> <td nowrap="nowrap">类型</td> <td nowrap="nowrap">厂商</td> <td nowrap="nowrap">产品</td> <td nowrap="nowrap" align="center">版本</td> <td nowrap="nowrap" colspan="2" align="center">影响面</td> </tr> </thead> <tbody> <tr class=''> <th rowspan="3" class="py-0 collapse-index" data-collapse-span="3" style="font-weight: 400"> 1 </th> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 系统 </td> <td class="bg-light"> netapp </td> <td class="bg-light"> data_ontap </td> <td class="bg-light" align="center"> * </td> <td class="bg-light"> </td> <td class="bg-light"> <b> Up to <br>(including)<br> 8.2.4 </b> </td> </tr> </tr> </tbody> </table> <header class="cvss-breakdown__header"> CVSS3评分 3.7 <span style="width: 37.0%"></span> </header> <ul class="cvss-breakdown__items"> <li class="cvss-breakdown__item"> 攻击路径 <i class="bi bi-info-circle" data-toggle="tooltip" data-placement="top" title="该指标反映了漏洞利用途径"></i> 网络 </li> <li class="cvss-breakdown__item"> 攻击复杂度 高 </li> <li class="cvss-breakdown__item"> 权限要求 无 </li> <li class="cvss-breakdown__item"> 影响范围 未更改 </li> <li class="cvss-breakdown__item"> 用户交互 无 </li> <li class="cvss-breakdown__item"> 可用性 无 </li> <li class="cvss-breakdown__item"> 保密性 低 </li> <li class="cvss-breakdown__item"> 完整性 无 </li> </ul> CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N <thead> <tr style="font-size: 16px;font-weight: 700;line-height: 24px"> <td nowrap="nowrap" style="border-top: none">CWE-ID</td> <td nowrap="nowrap" style="border-top: none;width: 70%">漏洞类型</td> </tr> </thead> <tbody> <tr> <td> CWE-200 </td> <td> 信息暴露 </td> </tr> </tbody> Tue, 26 Apr 2022 15:24:58 +0800https://zblog.zone.ci/?id=682887 <!-- .col --> <!-- .metric --> <p class="metric-label"> CVE编号 </p> CVE-2015-5009 <!-- /.metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 利用情况 </p> 暂无 <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 补丁情况 </p> N/A <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 披露时间 </p> 2016-01-18 <!-- .metric --> <!-- /.col --> <!-- .col --> <h6 class="border-bottom border-gray pb-2 mb-0">漏洞描述</h6> IBM WebSphere Commerce是美国IBM公司的一套电子商务解决方案。该方案可在一个单一的客户交互平台上支持所有的销售业务模型，包括B2C、B2B和B2B2C。 <br> IBM WebSphere Commerce存在跨站脚本漏洞。远程攻击者可通过特制的URL利用该漏洞注入任意Web脚本或HTML。 <h6 class="border-bottom border-gray pb-2 mb-0">解决建议</h6> 用户可参考如下供应商提供的安全公告获得补丁信息：<br>http://www-01.ibm.com/support/docview.wss?uid=swg21972610 <table class="table table-sm table-responsive"> <thead> <tr> <th style="border-bottom: 0px solid #dee2e6;padding: 0px 0px 4px 0px" scope="col"> <h6 style="margin-bottom: 5px">参考链接</h6> </th> <th style="border-bottom: 0px solid #dee2e6;width: 30%" scope="col"></th> </tr> </thead> <tbody> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54265 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54432 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54824 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54825 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54834 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54899 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg21972610 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www.securitytracker.com/id/1034695 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> </tbody> </table> <h6 class="border-bottom border-gray pb-2 mb-0">受影响软件情况 </h6> <table class="table"> <thead> <tr class="border-bottom" style="font-size: 16px;font-weight: 700;line-height: 24px;border-top: none"> <td>#</td> <td nowrap="nowrap">类型</td> <td nowrap="nowrap">厂商</td> <td nowrap="nowrap">产品</td> <td nowrap="nowrap" align="center">版本</td> <td nowrap="nowrap" colspan="2" align="center">影响面</td> </tr> </thead> <tbody> <tr class=''> <th rowspan="47" class="py-0 collapse-index" data-collapse-span="47" style="font-weight: 400"> 1 </th> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.1 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.10 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.11 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.2 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.3 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.4 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.5 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.6 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.7 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.8 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.9 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.1 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.2 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.3 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.4 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.5 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.6 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.7 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.8 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.9 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 8.0.0.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> </tr> </tbody> </table> <header class="cvss-breakdown__header"> CVSS3评分 5.4 <span style="width: 54.0%"></span> </header> <ul class="cvss-breakdown__items"> <li class="cvss-breakdown__item"> 攻击路径 <i class="bi bi-info-circle" data-toggle="tooltip" data-placement="top" title="该指标反映了漏洞利用途径"></i> 网络 </li> <li class="cvss-breakdown__item"> 攻击复杂度 低 </li> <li class="cvss-breakdown__item"> 权限要求 低 </li> <li class="cvss-breakdown__item"> 影响范围 已更改 </li> <li class="cvss-breakdown__item"> 用户交互 需要 </li> <li class="cvss-breakdown__item"> 可用性 无 </li> <li class="cvss-breakdown__item"> 保密性 低 </li> <li class="cvss-breakdown__item"> 完整性 低 </li> </ul> CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N <thead> <tr style="font-size: 16px;font-weight: 700;line-height: 24px"> <td nowrap="nowrap" style="border-top: none">CWE-ID</td> <td nowrap="nowrap" style="border-top: none;width: 70%">漏洞类型</td> </tr> </thead> <tbody> <tr> <td> CWE-79 </td> <td> 在Web页面生成时对输入的转义处理不恰当（跨站脚本） </td> </tr> </tbody> Tue, 26 Apr 2022 15:24:53 +0800https://zblog.zone.ci/?id=682886 <!-- .col --> <!-- .metric --> <p class="metric-label"> CVE编号 </p> CVE-2015-5008 <!-- /.metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 利用情况 </p> 暂无 <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 补丁情况 </p> N/A <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 披露时间 </p> 2016-01-18 <!-- .metric --> <!-- /.col --> <!-- .col --> <h6 class="border-bottom border-gray pb-2 mb-0">漏洞描述</h6> IBM WebSphere Commerce是一套电子商务解决方案。该方案可在一个单一的客户交互平台上支持所有的销售业务模型，包括B2C、B2B和B2B2C。 <br> IBM WebSphere Commerce存在跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 <h6 class="border-bottom border-gray pb-2 mb-0">解决建议</h6> 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：<br>http://www-01.ibm.com/support/docview.wss?uid=swg1JR54432 <table class="table table-sm table-responsive"> <thead> <tr> <th style="border-bottom: 0px solid #dee2e6;padding: 0px 0px 4px 0px" scope="col"> <h6 style="margin-bottom: 5px">参考链接</h6> </th> <th style="border-bottom: 0px solid #dee2e6;width: 30%" scope="col"></th> </tr> </thead> <tbody> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54264 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54265 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54432 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54824 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54825 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54834 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg1JR54899 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg21972610 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www.securitytracker.com/id/1034695 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> </tbody> </table> <h6 class="border-bottom border-gray pb-2 mb-0">受影响软件情况 </h6> <table class="table"> <thead> <tr class="border-bottom" style="font-size: 16px;font-weight: 700;line-height: 24px;border-top: none"> <td>#</td> <td nowrap="nowrap">类型</td> <td nowrap="nowrap">厂商</td> <td nowrap="nowrap">产品</td> <td nowrap="nowrap" align="center">版本</td> <td nowrap="nowrap" colspan="2" align="center">影响面</td> </tr> </thead> <tbody> <tr class=''> <th rowspan="47" class="py-0 collapse-index" data-collapse-span="47" style="font-weight: 400"> 1 </th> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.1 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.10 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.11 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.2 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.3 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.4 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.5 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.6 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.7 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.8 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 6.0.0.9 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.1 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.2 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.3 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.4 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.5 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.6 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.7 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.8 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 7.0.0.9 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> websphere_commerce </td> <td class="bg-light" align="center"> 8.0.0.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> </tr> </tbody> </table> <header class="cvss-breakdown__header"> CVSS3评分 6.1 <span style="width: 61.0%"></span> </header> <ul class="cvss-breakdown__items"> <li class="cvss-breakdown__item"> 攻击路径 <i class="bi bi-info-circle" data-toggle="tooltip" data-placement="top" title="该指标反映了漏洞利用途径"></i> 网络 </li> <li class="cvss-breakdown__item"> 攻击复杂度 低 </li> <li class="cvss-breakdown__item"> 权限要求 无 </li> <li class="cvss-breakdown__item"> 影响范围 已更改 </li> <li class="cvss-breakdown__item"> 用户交互 需要 </li> <li class="cvss-breakdown__item"> 可用性 无 </li> <li class="cvss-breakdown__item"> 保密性 低 </li> <li class="cvss-breakdown__item"> 完整性 低 </li> </ul> CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N <thead> <tr style="font-size: 16px;font-weight: 700;line-height: 24px"> <td nowrap="nowrap" style="border-top: none">CWE-ID</td> <td nowrap="nowrap" style="border-top: none;width: 70%">漏洞类型</td> </tr> </thead> <tbody> <tr> <td> CWE-79 </td> <td> 在Web页面生成时对输入的转义处理不恰当（跨站脚本） </td> </tr> </tbody> Tue, 26 Apr 2022 15:24:43 +0800https://zblog.zone.ci/?id=682885 <!-- .col --> <!-- .metric --> <p class="metric-label"> CVE编号 </p> CVE-2015-5002 <!-- /.metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 利用情况 </p> 暂无 <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 补丁情况 </p> N/A <!-- .metric --> <!-- /.col --> <!-- .col --> <!-- .metric --> <p class="metric-label"> 披露时间 </p> 2016-01-18 <!-- .metric --> <!-- /.col --> <!-- .col --> <h6 class="border-bottom border-gray pb-2 mb-0">漏洞描述</h6> IBM Host On-Demand是一套针对Java仿真的终端模拟器应用程序，它可通过基于浏览器的仿真提供对主机应用程序和数据的安全浏览器访问，并支持使用Java工具集快速创建定制Web应用程序等。 <br> IBM Host On-Demand存在跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 <h6 class="border-bottom border-gray pb-2 mb-0">解决建议</h6> 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：<br>http://www-01.ibm.com/support/docview.wss?uid=swg21973985 <table class="table table-sm table-responsive"> <thead> <tr> <th style="border-bottom: 0px solid #dee2e6;padding: 0px 0px 4px 0px" scope="col"> <h6 style="margin-bottom: 5px">参考链接</h6> </th> <th style="border-bottom: 0px solid #dee2e6;width: 30%" scope="col"></th> </tr> </thead> <tbody> <tr> <td nowrap="nowrap"> <span class="pr-1"> </span> http://www-01.ibm.com/support/docview.wss?uid=swg21973985 </td> <td> <span class="badge badge-pill badge-secondary"></span> </td> </tr> </tbody> </table> <h6 class="border-bottom border-gray pb-2 mb-0">受影响软件情况 </h6> <table class="table"> <thead> <tr class="border-bottom" style="font-size: 16px;font-weight: 700;line-height: 24px;border-top: none"> <td>#</td> <td nowrap="nowrap">类型</td> <td nowrap="nowrap">厂商</td> <td nowrap="nowrap">产品</td> <td nowrap="nowrap" align="center">版本</td> <td nowrap="nowrap" colspan="2" align="center">影响面</td> </tr> </thead> <tbody> <tr class=''> <th rowspan="29" class="py-0 collapse-index" data-collapse-span="29" style="font-weight: 400"> 1 </th> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.1 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.10 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.11 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.12 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.13 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.2 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.3 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.4 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.5 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.6 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.7 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.8 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> <tr class=''> <td colspan="10" style="font-size: 13px;color: #99a9bf;padding: 5px 0;border-top: none"> 运行在以下环境 </td> </tr> <tr class=''> <td class="bg-light"> 应用 </td> <td class="bg-light"> ibm </td> <td class="bg-light"> host_on-demand </td> <td class="bg-light" align="center"> 11.0.9 </td> <td class="bg-light" colspan="2" align="center">-</td> </tr> </tr> </tbody> </table> <header class="cvss-breakdown__header"> CVSS3评分 6.1 <span style="width: 61.0%"></span> </header> <ul class="cvss-breakdown__items"> <li class="cvss-breakdown__item"> 攻击路径 <i class="bi bi-info-circle" data-toggle="tooltip" data-placement="top" title="该指标反映了漏洞利用途径"></i> 网络 </li> <li class="cvss-breakdown__item"> 攻击复杂度 低 </li> <li class="cvss-breakdown__item"> 权限要求 无 </li> <li class="cvss-breakdown__item"> 影响范围 已更改 </li> <li class="cvss-breakdown__item"> 用户交互 需要 </li> <li class="cvss-breakdown__item"> 可用性 无 </li> <li class="cvss-breakdown__item"> 保密性 低 </li> <li class="cvss-breakdown__item"> 完整性 低 </li> </ul> CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N <thead> <tr style="font-size: 16px;font-weight: 700;line-height: 24px"> <td nowrap="nowrap" style="border-top: none">CWE-ID</td> <td nowrap="nowrap" style="border-top: none;width: 70%">漏洞类型</td> </tr> </thead> <tbody> <tr> <td> CWE-79 </td> <td> 在Web页面生成时对输入的转义处理不恰当（跨站脚本） </td> </tr> </tbody> Tue, 26 Apr 2022 15:24:41 +0800