Ibm Forms Experience Builder — known CVE vulnerabilities

Every CVE whose affected-product data names Ibm Forms Experience Builder, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2016-2884 — CVSS 8.0 (high): Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3.1, in an unspecified…
• CVE-2014-6169 — CVSS 5.4 (medium): Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inject arbitrary web…
• CVE-2016-6001 — CVSS 3.1 (low): IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing…
• CVE-2016-0369 — CVSS 2.7 (low): XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain…
• CVE-2016-0370 — CVSS 2.7 (low): Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to…