IBM i2 Enterprise Insight Analysis vulnerabilities

3 CVEs affecting IBM i2 Enterprise Insight Analysis, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1525, published 2018-12-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1504, published 2018-12-06. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could…
CVE-2018-1525, published 2018-12-06. Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days. IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could…
CVE-2018-1505, published 2018-12-06. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM i2 Enterprise Insight Analysis 2.1.7 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 141413.