CVE-2018-1791
MEDIUMIBM Connections 5.0, 5.5, and 6.0 - External Service Interaction via Request Property
Title source: llmDescription
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request property. By submitting suitable payloads, an attacker could exploit this vulnerability to induce the Connections server to attack other systems. IBM X-Force ID: 148946.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/docview.wss?uid=ibm10731207
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/148946
Scores
CVSS v3
4.9
EPSS
0.0098
EPSS Percentile
57.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L
Details
CWE
CWE-20
Status
published
Products (3)
ibm/connections
5.0
ibm/connections
5.5
ibm/connections
6.0
Published
Sep 14, 2018
Tracked Since
Feb 18, 2026