Skip to content
OpenAdvisories

Product · IBM

Documentation Offline

5 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.8

    IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

    IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs.

  • High 7.5

    IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

    IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory.