IBM Mobilefirst Platform Foundation vulnerabilities

3 CVEs affecting IBM Mobilefirst Platform Foundation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-4226, published 2020-05-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-4226, published 2020-05-27. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server…
CVE-2017-1772, published 2018-04-04. Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days. IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2017-1500, published 2017-08-01. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A Reflected Cross Site Scripting (XSS) vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight Framework 6.1, 6.2, 6.3, 7.0, 7.1, and 8.0. The vulnerable…