CVE-2018-1495

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

IBM FlashSystem V840 and V900 products could allow an authenticated attacker with specialized access to overwrite arbitrary files which could cause a denial of service. IBM X-Force ID: 141148.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
IBM	FlashSystem V900	—
IBM	FlashSystem V840	—

References

http://www.ibm.com/support/docview.wss?uid=ssg1S1012280Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ssg1S1012281Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/141148VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ssg1S1012280Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ssg1S1012281Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/141148VDB Entry, Vendor Advisory

Timeline

Published: May 29, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-149506.1The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href=" attack.CVE-2018-149516.1The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack.CVE-2018-149526.1The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink:href=" attack.CVE-2018-149536.1The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack.CVE-2018-149546.1The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.CVE-2018-149556.1The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).CVE-2018-149569.8CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sens CVE-2018-149579.8CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggetto_docume CVE-2018-149588.8An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and description) via index.php.CVE-2018-149598.8An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI.CVE-2018-14965.4IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed CVE-2018-149608.8Xiao5uCompany 1.7 has CSRF via admin/Admin.asp.