IBM Insights Foundation For Energy vulnerabilities

4 CVEs affecting IBM Insights Foundation For Energy, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-1342, published 2017-12-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-1311, published 2017-10-03. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. IBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete…
CVE-2017-1141, published 2017-04-28. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Insights Foundation for Energy 1.0, 1.5, and 1.6 could allow an authenticated user to obtain sensitive information from error messages. IBM X-Force ID: 121907.
CVE-2017-1342, published 2017-12-07. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457.
CVE-2017-1345, published 2017-10-03. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality…