CVE-2018-1677

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 145171.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-755

Affected software

No affected versions have been published.

Timeline

Published: Dec 20, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-167708.8In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss CVE-2018-167719.8Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php.CVE-2018-167724.8Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new.CVE-2018-167734.8EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.CVE-2018-167747.5HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete.CVE-2018-167754.8An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu.CVE-2018-167764.8wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.CVE-2018-167786.1Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via CVE-2018-167796.1BlogCMS through 2016-10-25 has XSS via a comment.CVE-2018-167805.4Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment.CVE-2018-167816.5ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that la CVE-2018-167828.8libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmpr_read_rle_internal function in imagew-bmp.c.