# CVEs published 2018-09-27

15 CVEs were published on September 27, 2018: 0 critical, 1 high. Days are UTC.

- [CVE-2018-15611](https://cve.now/CVE-2018-15611.md): Communication Manager Local Administrator PrivEsc (CVSS 6.3, Avaya Communication Manager)
- [CVE-2018-14824](https://cve.now/CVE-2018-14824.md): Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when proces (no CVSS, Delta Electronics Delta Industrial Automation PMSoft)
- [CVE-2018-14650](https://cve.now/CVE-2018-14650.md): It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the t (CVSS 5.9, \[UNKNOWN\] sos-collector)
- [CVE-2018-1660](https://cve.now/CVE-2018-1660.md): IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM WebSphere Portal)
- [CVE-2018-1716](https://cve.now/CVE-2018-1716.md): IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. (CVSS 6.1, IBM WebSphere Portal)
- [CVE-2018-1736](https://cve.now/CVE-2018-1736.md): IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. (CVSS 7.4, IBM WebSphere Portal)
- [CVE-2018-1820](https://cve.now/CVE-2018-1820.md): IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM WebSphere Portal)
- [CVE-2018-7101](https://cve.now/CVE-2018-7101.md): A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for (no CVSS, Hewlett Packard Enterprise HPE Integrated Lights-Out 5 (iLO…)
- [CVE-2018-7102](https://cve.now/CVE-2018-7102.md): A security vulnerability in HPE Intelligent Management Center (iMC) PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via d (no CVSS, Hewlett Packard Enterprise HPE Intelligent Management Cente…)
- [CVE-2018-7103](https://cve.now/CVE-2018-7103.md): A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier t (no CVSS, Hewlett Packard Enterprise HPE Intelligent Management Cente…)
- [CVE-2018-7104](https://cve.now/CVE-2018-7104.md): A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier t (no CVSS, Hewlett Packard Enterprise HPE Intelligent Management Cente…)
- [CVE-2018-7105](https://cve.now/CVE-2018-7105.md): A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) pr (no CVSS, Hewlett Packard Enterprise HPE Integrated Lights-Out 5 (iLO…)
- [CVE-2018-7107](https://cve.now/CVE-2018-7107.md): A potential security vulnerability has been identified in HPE Device Entitlement Gateway (DEG) v3.2.4, v3.3 and v3.3.1. (no CVSS, Hewlett Packard Enterprise HPE Device Entitlement Gateway)
- [CVE-2018-7108](https://cve.now/CVE-2018-7108.md): HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vu (no CVSS, Hewlett Packard Enterprise HPE StorageWorks XP7 Automation…)
- [CVE-2018-7109](https://cve.now/CVE-2018-7109.md): HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager (eIUM) v9.0FP1 with the cumulati (no CVSS, Hewlett Packard Enterprise HPE enhanced Internet Usage Mana…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-09-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.