Medium severity5.4NVD Advisory· Published Oct 24, 2017· Updated May 13, 2026
CVE-2017-1209
CVE-2017-1209
Description
IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123849.
Affected products
11- IBM/Daeja ViewONEv5Range: 4.1.5.1
cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:professional:*:*:*+ 9 more
- cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:professional:*:*:*
- cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:virtual:*:*:*
- cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:professional:*:*:*
- cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:virtual:*:*:*
- cpe:2.3:a:ibm:daeja_viewone:5.0.0:*:*:*:virtual:*:*:*
- cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:professional:*:*:*
- cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:virtual:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.ibm.com/support/docview.wssnvdIssue TrackingVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/123849nvdIssue TrackingVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.