CVEs published September 27, 2018
15 CVEs were published on September 27, 2018: 0 critical, 1 high.
- Published
- 15
- Critical
- 0
- High
- 1
- Medium
- 5
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- IBM WebSphere Portal
- 4
- Hewlett Packard Enterprise HPE Intelligent Management Cente…
- 3
- Hewlett Packard Enterprise HPE Integrated Lights-Out 5 (iLO…
- 2
- [UNKNOWN] sos-collector
- 1
- Avaya Communication Manager
- 1
- Delta Electronics Delta Industrial Automation PMSoft
- 1
- Hewlett Packard Enterprise HPE Device Entitlement Gateway
- 1
- Hewlett Packard Enterprise HPE enhanced Internet Usage Mana…
- 1
- Hewlett Packard Enterprise HPE StorageWorks XP7 Automation…
- 1
High 1
Medium, low and unrated 14
- CVE-2018-15611Communication Manager Local Administrator PrivEscAvaya Communication Manager
- CVE-2018-14824Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when procesDelta Electronics Delta Industrial Automation PMSoft
- CVE-2018-14650It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the t[UNKNOWN] sos-collector
- CVE-2018-1660IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.IBM WebSphere Portal
- CVE-2018-1716IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.IBM WebSphere Portal
- CVE-2018-1820IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.IBM WebSphere Portal
- CVE-2018-7101A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Hewlett Packard Enterprise HPE Integrated Lights-Out 5 (iLO…
- CVE-2018-7102A security vulnerability in HPE Intelligent Management Center (iMC) PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via dHewlett Packard Enterprise HPE Intelligent Management Cente…
- CVE-2018-7103A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier tHewlett Packard Enterprise HPE Intelligent Management Cente…
- CVE-2018-7104A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier tHewlett Packard Enterprise HPE Intelligent Management Cente…
- CVE-2018-7105A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prHewlett Packard Enterprise HPE Integrated Lights-Out 5 (iLO…
- CVE-2018-7107A potential security vulnerability has been identified in HPE Device Entitlement Gateway (DEG) v3.2.4, v3.3 and v3.3.1.Hewlett Packard Enterprise HPE Device Entitlement Gateway
- CVE-2018-7108HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vuHewlett Packard Enterprise HPE StorageWorks XP7 Automation…
- CVE-2018-7109HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager (eIUM) v9.0FP1 with the cumulatiHewlett Packard Enterprise HPE enhanced Internet Usage Mana…