IBM Webi vulnerabilities

4 CVEs affecting IBM Webi, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-1559, published 2011-04-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-1559, published 2011-04-05. High severity, CVSS 10.0. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 has unknown impact and attack vectors.
CVE-2010-1243, published 2010-04-05. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. The IBM Web Interface for Content Management (aka WEBi) before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors.
CVE-2010-1242, published 2010-04-05. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via…
CVE-2011-1558, published 2011-04-05. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 allow remote attackers to inject arbitrary web script or HTML via…