Vulnerabilidades do Ibm Documentation Offline
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ibm Documentation Offline: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:ibm:documentation_offline
CVE-2026-17482
Crítica · 9.8
CWE-73 13/08/2026
IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.
CVE-2026-17481
Crítica · 9.8
CWE-117 13/08/2026
IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs.
CVE-2026-17473
Alta · 7.5
CWE-22 13/08/2026
IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory.
CVE-2026-17468
Média · 5.3
CWE-321 13/08/2026
IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key.
CVE-2026-16713
Média · 5.3
CWE-1327 13/08/2026
IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.