IBM Tealeaf Customer Experience vulnerabilities

15 CVEs affecting IBM Tealeaf Customer Experience, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-4987, published 2018-03-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-4988, published 2016-01-18. High severity, CVSS 8.6. EPSS: 3% chance of exploitation in the next 30 days. Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073,…
CVE-2017-1279, published 2018-01-26. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot"…
CVE-2016-2983, published 2018-01-26. High severity, CVSS 8.1. EPSS: 1.7% chance of exploitation in the next 30 days. IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker under unusual circumstances to read operational data or TLS session state for any active sessions, cause denial of…
CVE-2017-1204, published 2018-01-26. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains hard-coded credentials. A remote attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 123740.
CVE-2016-5976, published 2016-09-26. Medium severity, CVSS 4.9. EPSS: 1.4% chance of exploitation in the next 30 days. The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before…
CVE-2016-5996, published 2016-09-26. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before…
CVE-2015-4987, published 2018-03-27. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. The search and replay servers in IBM Tealeaf Customer Experience 8.0 through 9.0.2 allow remote attackers to bypass authentication via unspecified vectors. IBM X-Force ID: 105896.
CVE-2015-4989, published 2016-01-02. Low severity, CVSS 3.7. EPSS: 0.9% chance of exploitation in the next 30 days. The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before…
CVE-2016-5968, published 2016-11-25. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. The Replay Server in IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before…
CVE-2016-5997, published 2016-09-26. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before…

Latest

CVE-2015-4961, published 2016-11-24. Low severity, CVSS 2.6. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A…
CVE-2016-5978, published 2016-09-26. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5,…
CVE-2016-5977, published 2016-09-26. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. Open redirect vulnerability in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before…