CVE-2017-1333

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM	OpenPages GRC Platform	7.1; 7.2; 7.3

References

http://www.ibm.com/support/docview.wss?uid=swg21997796Patch, Vendor Advisory
http://www.securityfocus.com/bid/101656Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/126241VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21997796Patch, Vendor Advisory
http://www.securityfocus.com/bid/101656Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/126241VDB Entry, Vendor Advisory

Timeline

Published: Nov 1, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-13345.4IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the CVE-2017-13355.4IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the CVE-2017-13364.4IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files. IBM X-Force ID CVE-2017-13378.1IBM WebSphere MQ 9.0.1 and 9.0.2 Java/JMS application can incorrectly transmit user credentials in plain text. IBM X-Force ID: 126245.CVE-2017-13385.4IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr CVE-2017-13394.4IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator ma CVE-2017-13405.0IBM Jazz Reporting Service (JRS) 6.0.4 could allow an authenticated user to obtain information on another server that the current report bui CVE-2017-13413.7IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been CVE-2017-13424.3IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to cond CVE-2017-13455.4IBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript CVE-2017-13462.5IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during offline installs which could be read by CVE-2017-13478.8IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statemen